Skip to content
Threat Feed
Subscribe

Tag

Dnssec

2 briefs RSS
low advisory

Resource Exhaustion Vulnerability in BIND 9 DNSSEC Validation (CVE-2026-11605)

A resource exhaustion vulnerability, CVE-2026-11605, affects specific versions of ISC BIND 9, where DNSSEC validation disproportionately consumes CPU resources when processing superfluous RRSIG records, potentially leading to a denial of service.

BIND 9 +2 dns dnssec vulnerability denial-of-service resource-exhaustion
1t 1c
medium advisory

Hickory DNS NSEC3 Validation Vulnerability Leads to DoS

A vulnerability in Hickory DNS's NSEC3 closest-encloser proof validation allows a remote attacker to cause a denial of service by exhausting memory when processing crafted DNS responses with mismatched SOA records.

hickory-proto +1 denial-of-service dnssec memory-exhaustion
2r 1t