Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-3593

Опубликовано: 20 мая 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.4

Описание

A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 through 9.20.22-S1. BIND 9 versions 9.18.0 through 9.18.48 and 9.18.11-S1 through 9.18.48-S1 are NOT affected.

РелизСтатусПримечание
devel

pending

1:9.20.18-1ubuntu4
esm-infra-legacy/trusty

not-affected

code not present
esm-infra-legacy/xenial

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

not-affected

code not present
esm-infra/xenial

not-affected

code not present
jammy

not-affected

code not present
noble

not-affected

code not present
questing

released

1:9.20.11-1ubuntu2.4
resolute

released

1:9.20.18-1ubuntu2.1

Показывать по

РелизСтатусПримечание
devel

DNE

esm-infra/focal

not-affected

code not present
jammy

not-affected

code not present
noble

DNE

questing

DNE

resolute

DNE

upstream

not-affected

code not present

Показывать по

РелизСтатусПримечание
devel

not-affected

code not present
esm-apps/noble

not-affected

code not present
esm-apps/resolute

not-affected

code not present
esm-infra-legacy/trusty

not-affected

code not present
esm-infra-legacy/xenial

not-affected

code not present
esm-infra/bionic

not-affected

code not present
esm-infra/focal

not-affected

code not present
esm-infra/xenial

not-affected

code not present
jammy

not-affected

code not present
noble

not-affected

code not present

Показывать по

EPSS

Процентиль: 76%
0.01844
Низкий

7.4 High

CVSS3

Связанные уязвимости

CVSS3: 7.4
redhat
3 месяца назад

A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 through 9.20.22-S1. BIND 9 versions 9.18.0 through 9.18.48 and 9.18.11-S1 through 9.18.48-S1 are NOT affected.

CVSS3: 7.4
nvd
3 месяца назад

A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 through 9.20.22-S1. BIND 9 versions 9.18.0 through 9.18.48 and 9.18.11-S1 through 9.18.48-S1 are NOT affected.

CVSS3: 7.4
msrc
3 месяца назад

Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation

CVSS3: 7.4
debian
3 месяца назад

A use-after-free vulnerability exists within the DNS-over-HTTPS implem ...

CVSS3: 7.4
github
3 месяца назад

A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 through 9.20.22-S1. BIND 9 versions 9.18.0 through 9.18.48 and 9.18.11-S1 through 9.18.48-S1 are NOT affected.

EPSS

Процентиль: 76%
0.01844
Низкий

7.4 High

CVSS3