Skip to content
Threat Feed
Subscribe

Vendor

Internet Systems Consortium (ISC)

3 briefs RSS
low advisory

CVE-2026-13204: BIND 9 Denial-of-Service Vulnerability

A critical vulnerability (CVE-2026-13204) in Internet Systems Consortium (ISC) BIND 9 can lead to a denial-of-service condition where the server exits unexpectedly due to an assertion failure during DNSSEC validation of specific NSEC/NSEC3 record configurations. This allows an unauthenticated attacker to cause a BIND 9 DNS resolver to crash, disrupting DNS resolution services.

BIND 9 +4 dns dos vulnerability bind cve
1t 1c
low advisory

Resource Exhaustion Vulnerability in BIND 9 DNSSEC Validation (CVE-2026-11605)

A resource exhaustion vulnerability, CVE-2026-11605, affects specific versions of ISC BIND 9, where DNSSEC validation disproportionately consumes CPU resources when processing superfluous RRSIG records, potentially leading to a denial of service.

BIND 9 +2 dns dnssec vulnerability denial-of-service resource-exhaustion
1t 1c
high threat

CVE-2026-3593 Use-After-Free Vulnerability in BIND 9 DNS-over-HTTPS

A use-after-free vulnerability in the DNS-over-HTTPS implementation of BIND 9 versions 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, and 9.20.9-S1 through 9.20.22-S1 could allow an attacker to cause a denial of service or potentially execute arbitrary code.

BIND 9 +2 cve dns use-after-free denial-of-service remote-code-execution
2r 2t 1c