IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.5Alta

CVE-2026-13204Unexpected exit in certain situations with NSEC and NSEC3 both present

ISC BIND 9 Publicada: (hace 3 meses)

Descripción

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

Debilidad (CWE): CWE-617

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
isc bind 9.11.0 – ≤ 9.18.50
ISC BIND 9 9.11.0 – ≤ 9.18.50, 9.20.0 – ≤ 9.20.24, 9.21.0 – ≤ 9.21.23, 9.11.3-S1 – ≤ 9.18.50-S1, 9.20.9-S1 – ≤ 9.20.24-S1

Referencias y parches

Coincidencias CPE (NVD) (5)
  • cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:* ≥ 9.11.0 ≤ 9.18.50
  • cpe:2.3:a:isc:bind:*:*:*:*:supported_preview:*:*:* ≥ 9.11.3 ≤ 9.18.50
  • cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:* ≥ 9.20.0 ≤ 9.20.24
  • cpe:2.3:a:isc:bind:*:*:*:*:supported_preview:*:*:* ≥ 9.20.9 ≤ 9.20.24
  • cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:* ≥ 9.21.0 ≤ 9.21.23

CVE recientes del mismo producto — ISC BIND 9

8.1Alta
CVE-2026-94300

Concurrent GSS-TSIG messages corrupt memory

ISC BIND 9

Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacke…

7.5Alta
CVE-2026-19630

Amplified resource exhaustion in inbound message processing

ISC BIND 9

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate am…