Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:8075

Опубликовано: 15 апр. 2026
Источник: rocky
Оценка: Important

Описание

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
python3-bindnoarch34.el9_7.2python3-bind-9.16.23-34.el9_7.2.noarch.rpm
bindx86_6434.el9_7.2bind-9.16.23-34.el9_7.2.x86_64.rpm
bind-chrootx86_6434.el9_7.2bind-chroot-9.16.23-34.el9_7.2.x86_64.rpm
bind-dnssec-docnoarch34.el9_7.2bind-dnssec-doc-9.16.23-34.el9_7.2.noarch.rpm
bind-dnssec-utilsx86_6434.el9_7.2bind-dnssec-utils-9.16.23-34.el9_7.2.x86_64.rpm
bind-libsx86_6434.el9_7.2bind-libs-9.16.23-34.el9_7.2.x86_64.rpm
bind-licensenoarch34.el9_7.2bind-license-9.16.23-34.el9_7.2.noarch.rpm
bind-utilsx86_6434.el9_7.2bind-utils-9.16.23-34.el9_7.2.x86_64.rpm

Показывать по

Связанные CVE

CVE-2026-1519

Ссылки на источники

Исправления

Связанные уязвимости

ubuntu логотип

CVE-2026-1519

CVSS3: 7.5
ubuntu
4 месяца назад

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.

redhat логотип

CVE-2026-1519

CVSS3: 7.5
redhat
4 месяца назад

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.

nvd логотип

CVE-2026-1519

CVSS3: 7.5
nvd
4 месяца назад

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.

msrc логотип

CVE-2026-1519

CVSS3: 7.5
msrc
4 месяца назад

Excessive NSEC3 iterations cause high CPU load during insecure delegation validation

debian логотип

CVE-2026-1519

CVSS3: 7.5
debian
4 месяца назад

If a BIND resolver is performing DNSSEC validation and encounters a ma ...