7.5
Élevée
CVE-2026-1519 If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume…
Description
If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BIND 9 9.21 | 9.21.0 → 9.21.19 | Pas de correctif indiqué |
| BIND 9 9.20 | 9.20.0 → 9.20.20 | Pas de correctif indiqué |
| BIND 9 9.18 | 9.18.0 → 9.18.46 | Pas de correctif indiqué |
| BIND 9 9.11 | 9.11.0 → 9.16.50 | Pas de correctif indiqué |
| Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) | Versions non publiées | |
| Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) | Versions non publiées | |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Versions non publiées | |
| Red Hat Enterprise Linux Server Optional (v. 7 ELS) | Versions non publiées | |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Versions non publiées |
Afficher les 53 autres branches Masquer les 53 autres branches
Références
- CVE-2026-1519 kb.isc.org
- downloads.isc.org downloads.isc.org
- downloads.isc.org downloads.isc.org
- downloads.isc.org downloads.isc.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de BIND 9
Les 87 CVE de BIND 9 →
CVE-2026-97313
A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may…
7.5
Élevée
CVE-2026-96888
A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an…
7.5
Élevée
CVE-2026-94300
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`"
8.1
Élevée
CVE-2026-19630
In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with…
7.5
Élevée