[CVE-2026-19630 ] Published: Oct 21, 2026, 12:00:00 AM UTC
bind9: CVE-2026-19630
High(7.5) Unbekannt Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Unbekannt · Behoben: 1:9.20.30-1, 1:9.20.30-1~deb13u1
Version impact unknown
dsa · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Unbekannt · Behoben: 1:9.20.30-1, 1:9.20.30-1~deb13u1
Version impact unknown
dsa · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
[CVE-2026-94300 ] Published: Oct 21, 2026, 12:00:00 AM UTC
bind9: CVE-2026-94300
High(8.1) Unbekannt Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Unbekannt · Behoben: 1:9.20.30-1, 1:9.20.30-1~deb13u1
Version impact unknown
dsa · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Unbekannt · Behoben: 1:9.20.30-1, 1:9.20.30-1~deb13u1
Version impact unknown
dsa · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
[CVE-2026-96888 ] Published: Oct 21, 2026, 12:00:00 AM UTC
bind9: CVE-2026-96888
High(7.5) Unbekannt Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Unbekannt · Behoben: 1:9.20.30-1, 1:9.20.30-1~deb13u1
Version impact unknown
dsa · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Unbekannt · Behoben: 1:9.20.30-1, 1:9.20.30-1~deb13u1
Version impact unknown
dsa · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
[CVE-2026-97313 ] Published: Oct 21, 2026, 12:00:00 AM UTC
bind9: CVE-2026-97313
High(7.5) Unbekannt Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Unbekannt · Behoben: 1:9.20.30-1, 1:9.20.30-1~deb13u1
Version impact unknown
dsa · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Unbekannt · Behoben: 1:9.20.30-1, 1:9.20.30-1~deb13u1
Version impact unknown
dsa · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
[CVE-2026-12617 ] Published: Jul 22, 2026, 12:00:00 AM UTC
The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A rec
High(8.6) Unbekannt Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Unbekannt · Behoben: 1:9.18.49-1~deb12u2, 1:9.20.26-1, 1:9.20.26-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Unbekannt · Behoben: 1:9.18.49-1~deb12u2, 1:9.20.26-1, 1:9.20.26-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
[CVE-2026-11605 ] Published: Jul 21, 2026, 2:37:50 PM UTC
The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritat
High(8.6) Unbekannt Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Unbekannt · Behoben: 1:9.18.49-1~deb12u2, 1:9.20.26-1, 1:9.20.26-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Unbekannt · Behoben: 1:9.18.49-1~deb12u2, 1:9.20.26-1, 1:9.20.26-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
[CVE-2026-3039 ] Published: May 20, 2026, 12:00:00 AM UTC
BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typi
High(7.5) Unbekannt Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Unbekannt · Behoben: 1:9.18.49-1~deb12u2, 1:9.20.23-1, 1:9.20.23-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Unbekannt · Behoben: 1:9.18.49-1~deb12u2, 1:9.20.23-1, 1:9.20.23-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
[CVE-2026-3592 ] Published: May 20, 2026, 12:00:00 AM UTC
BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resour
Medium(5.3) Unbekannt Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Unbekannt · Behoben: 1:9.18.49-1~deb12u2, 1:9.20.23-1, 1:9.20.23-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Unbekannt · Behoben: 1:9.18.49-1~deb12u2, 1:9.20.23-1, 1:9.20.23-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
[CVE-2026-5946 ] Published: May 20, 2026, 12:00:00 AM UTC
Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`, or DNS messages that specify meta-classes
High(7.5) Unbekannt Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Unbekannt · Behoben: 1:9.18.49-1~deb12u2, 1:9.20.23-1, 1:9.20.23-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Unbekannt · Behoben: 1:9.18.49-1~deb12u2, 1:9.20.23-1, 1:9.20.23-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
[CVE-2026-5950 ] Published: May 20, 2026, 12:00:00 AM UTC
An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticated attacker to cause severe resource exhaustion by sending
Medium(5.3) Unbekannt Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Unbekannt · Behoben: 1:9.18.49-1~deb12u2, 1:9.20.23-1, 1:9.20.23-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Unbekannt · Behoben: 1:9.18.49-1~deb12u2, 1:9.20.23-1, 1:9.20.23-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 12; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
[CVE-2026-3593 ] Published: Apr 10, 2026, 6:39:00 PM UTC
A use-after-free vulnerability exists within the DNS-over-HTTPS implementation.
This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 through 9.20.22-S1.
BIN
High(7.4) Unbekannt Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Unbekannt · Behoben: 1:9.20.23-1, 1:9.20.23-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Unbekannt · Behoben: 1:9.20.23-1, 1:9.20.23-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
[CVE-2026-5947 ] Published: Apr 10, 2026, 6:39:00 PM UTC
Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG(0), it begins work to validate that signature. I
High(7.5) Unbekannt Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Unbekannt · Behoben: 1:9.20.23-1, 1:9.20.23-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Unbekannt · Behoben: 1:9.20.23-1, 1:9.20.23-1~deb13u1
Version impact unknown
nvd · bind9 · debian · bookworm; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
[CVE-2026-3104 ] Published: Mar 25, 2026, 12:00:00 AM UTC
Bind vulnerabilities
High(7.5) Unbekannt Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Unbekannt · Behoben: 1:9.20.21-1, 1:9.20.21-1~deb13u1
Version impact unknown
usn · bind9 · debian · bookworm; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Unbekannt · Behoben: 1:9.20.21-1, 1:9.20.21-1~deb13u1
Version impact unknown
usn · bind9 · debian · bookworm; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
[CVE-2026-3119 ] Published: Mar 25, 2026, 12:00:00 AM UTC
Bind vulnerabilities
Medium(6.5) Unbekannt Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Unbekannt · Behoben: 1:9.20.21-1, 1:9.20.21-1~deb13u1
Version impact unknown
usn · bind9 · debian · bookworm; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Unbekannt · Behoben: 1:9.20.21-1, 1:9.20.21-1~deb13u1
Version impact unknown
usn · bind9 · debian · bookworm; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
[CVE-2026-3591 ] Published: Mar 25, 2026, 12:00:00 AM UTC
Bind vulnerabilities
Medium(5.4) Unbekannt Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Unbekannt · Behoben: 1:9.20.21-1, 1:9.20.21-1~deb13u1
Version impact unknown
usn · bind9 · debian · bookworm; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Unbekannt · Behoben: 1:9.20.21-1, 1:9.20.21-1~deb13u1
Version impact unknown
usn · bind9 · debian · bookworm; pypi · bind9 · debian · 13; pypi · bind9 · debian · 14
[CVE-2026-10723 ] Published: Oct 22, 2025, 4:15:42 PM UTC
BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.
This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0
High(8.6) Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 27, 2026, 11:26:07 AM UTC
Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Behoben · Behoben: 1:9.18.49-1~deb12u2
nvd · bind9 · debian · bookworm; nvd · bind9 · debian · 12
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Behoben · Behoben: 1:9.18.49-1~deb12u2
nvd · bind9 · debian · bookworm; nvd · bind9 · debian · 12
[CVE-2026-10822 ] Published: Oct 22, 2025, 4:15:42 PM UTC
If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit.
BIND will first need to store a DNS record for a key (KEY
High(8.6) Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 27, 2026, 11:26:07 AM UTC
Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Behoben · Behoben: 1:9.18.49-1~deb12u2
nvd · bind9 · debian · bookworm; nvd · bind9 · debian · 12
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Behoben · Behoben: 1:9.18.49-1~deb12u2
nvd · bind9 · debian · bookworm; nvd · bind9 · debian · 12
[CVE-2026-11331 ] Published: Oct 22, 2025, 4:15:42 PM UTC
An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not h
High(8.6) Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 27, 2026, 11:26:07 AM UTC
Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Behoben · Behoben: 1:9.18.49-1~deb12u2
nvd · bind9 · debian · bookworm; nvd · bind9 · debian · 12
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Behoben · Behoben: 1:9.18.49-1~deb12u2
nvd · bind9 · debian · bookworm; nvd · bind9 · debian · 12
[CVE-2026-11622 ] Published: Oct 22, 2025, 4:15:42 PM UTC
A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the re
High(8.6) Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 27, 2026, 11:26:07 AM UTC
Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Behoben · Behoben: 1:9.18.49-1~deb12u2
nvd · bind9 · debian · bookworm; nvd · bind9 · debian · 12
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Behoben · Behoben: 1:9.18.49-1~deb12u2
nvd · bind9 · debian · bookworm; nvd · bind9 · debian · 12
[CVE-2026-11721 ] Published: Oct 22, 2025, 4:15:42 PM UTC
It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `named` to produce a wildcard n
High(8.6) Unbekannt Die Paketzuordnung läuft. Beobachtet: Oct 27, 2026, 11:26:07 AM UTC
Details (2) 1:9.18.49-1~deb12u2 · amd64 · bookworm-security
Behoben · Behoben: 1:9.18.49-1~deb12u2
nvd · bind9 · debian · bookworm; nvd · bind9 · debian · 12
1:9.18.49-1~deb12u2 · arm64 · bookworm-security
Behoben · Behoben: 1:9.18.49-1~deb12u2
nvd · bind9 · debian · bookworm; nvd · bind9 · debian · 12