As cited
Copy frozen at (site build).
vulnerabilities
ISC has disclosed four vulnerabilities in BIND 9 (CVE-2026-19630, CVE-2026-94300, CVE-2026-96888, CVE-2026-97313)
Internet Systems Consortium disclosed four vulnerabilities in BIND 9 on October 21, 2026. The issues include amplified resource exhaustion in inbound message processing, memory corruption from concurrent GSS-TSIG messages, and unexpected termination when redirect zones are used with strict QNAME handling. Detailed technical information is available in ISC's knowledge base for each CVE.
Why it matters: DNS administrators running BIND 9 need to review these vulnerabilities for potential denial of service and memory corruption impacts to their authoritative or recursive resolvers.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
ISC has disclosed four vulnerabilities in BIND 9 (CVE-2026-19630, CVE-2026-94300, CVE-2026-96888, CVE-2026-97313)
Internet Systems Consortium disclosed four vulnerabilities in BIND 9 on October 21, 2026. The issues include amplified resource exhaustion in inbound message processing, memory corruption from concurrent GSS-TSIG messages, and unexpected termination when redirect zones are used with strict QNAME handling. Detailed technical information is available in ISC's knowledge base for each CVE.
Why it matters: DNS administrators running BIND 9 need to review these vulnerabilities for potential denial of service and memory corruption impacts to their authoritative or recursive resolvers.
- Source published
- First seen by Cybersecurity Tracker