RHSA-2026:55441

Vulnerability from csaf_redhat - Published: 2026-08-17 04:00 - Updated: 2026-08-20 15:18
Summary
Red Hat Security Advisory: bind security update
Severity
Important
Notes
Topic: An update for bind is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039) * bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946) * bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331) * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321) * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622) * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721) * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204) * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
CVE-2026-3039

A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending maliciously-constructed packets to BIND servers configured for TKEY-based authentication via GSS-API (Generic Security Service Application Program Interface) tokens. This can lead to excessive memory consumption, resulting in a Denial of Service (DoS) for the affected server.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-770 - Allocation of Resources Without Limits or Throttling
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Threats
Impact Important
CVE-2026-5946

A flaw was found in the bind component, specifically within the `named` daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System (DNS) messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the `named` daemon when processed. Successful exploitation leads to an application level Denial of Service (DoS), making the DNS service unavailable.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-1287 - Improper Validation of Specified Type of Input
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686 —
Vendor Fix fix
Workaround
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Workaround
Threats
Impact Important
CVE-2026-10723

BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.

6.8 (Medium)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
CWE-345 - Insufficient Verification of Data Authenticity
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Threats
Impact Moderate
CVE-2026-11331

An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of the BIND 9 software. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Threats
Impact Important
CVE-2026-11622

A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the max-cache-size parameter

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-400 - Uncontrolled Resource Consumption
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Threats
Impact Important
CVE-2026-11721

It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes named to produce a wildcard name for a zone that is shorter than the attacker's zone, which can result in cache poisoning. For this attack to have any effect, the resolver under attack must have set synth-from-dnssec yes; (which is the default).

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CWE-345 - Insufficient Verification of Data Authenticity
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Threats
Impact Important
CVE-2026-13204

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof.

7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-617 - Reachable Assertion
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Threats
Impact Important
CVE-2026-13321

The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone.

8.6 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Affected products
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64 —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x —
Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64 —
Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686 —
Vendor Fix fix
Product Identifier Version Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x —
Unresolved product id: CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 —
Threats
Impact Important
References
URL Category
https://access.redhat.com/errata/RHSA-2026:55441 self
https://access.redhat.com/security/updates/classi… external
https://bugzilla.redhat.com/show_bug.cgi?id=2479767 external
https://bugzilla.redhat.com/show_bug.cgi?id=2479771 external
https://bugzilla.redhat.com/show_bug.cgi?id=2503721 external
https://bugzilla.redhat.com/show_bug.cgi?id=2504166 external
https://bugzilla.redhat.com/show_bug.cgi?id=2504298 external
https://bugzilla.redhat.com/show_bug.cgi?id=2504338 external
https://bugzilla.redhat.com/show_bug.cgi?id=2504447 external
https://bugzilla.redhat.com/show_bug.cgi?id=2504560 external
https://security.access.redhat.com/data/csaf/v2/a… self
https://access.redhat.com/security/cve/CVE-2026-3039 self
https://bugzilla.redhat.com/show_bug.cgi?id=2479767 external
https://www.cve.org/CVERecord?id=CVE-2026-3039 external
https://nvd.nist.gov/vuln/detail/CVE-2026-3039 external
https://access.redhat.com/security/cve/CVE-2026-5946 self
https://bugzilla.redhat.com/show_bug.cgi?id=2479771 external
https://www.cve.org/CVERecord?id=CVE-2026-5946 external
https://nvd.nist.gov/vuln/detail/CVE-2026-5946 external
https://access.redhat.com/security/cve/CVE-2026-10723 self
https://bugzilla.redhat.com/show_bug.cgi?id=2504560 external
https://www.cve.org/CVERecord?id=CVE-2026-10723 external
https://nvd.nist.gov/vuln/detail/CVE-2026-10723 external
https://access.redhat.com/security/cve/CVE-2026-11331 self
https://bugzilla.redhat.com/show_bug.cgi?id=2503721 external
https://www.cve.org/CVERecord?id=CVE-2026-11331 external
https://nvd.nist.gov/vuln/detail/CVE-2026-11331 external
https://access.redhat.com/security/cve/CVE-2026-11622 self
https://bugzilla.redhat.com/show_bug.cgi?id=2504298 external
https://www.cve.org/CVERecord?id=CVE-2026-11622 external
https://nvd.nist.gov/vuln/detail/CVE-2026-11622 external
https://access.redhat.com/security/cve/CVE-2026-11721 self
https://bugzilla.redhat.com/show_bug.cgi?id=2504338 external
https://www.cve.org/CVERecord?id=CVE-2026-11721 external
https://nvd.nist.gov/vuln/detail/CVE-2026-11721 external
https://access.redhat.com/security/cve/CVE-2026-13204 self
https://bugzilla.redhat.com/show_bug.cgi?id=2504447 external
https://www.cve.org/CVERecord?id=CVE-2026-13204 external
https://nvd.nist.gov/vuln/detail/CVE-2026-13204 external
https://access.redhat.com/security/cve/CVE-2026-13321 self
https://bugzilla.redhat.com/show_bug.cgi?id=2504166 external
https://www.cve.org/CVERecord?id=CVE-2026-13321 external
https://nvd.nist.gov/vuln/detail/CVE-2026-13321 external
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for bind is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)\n\n* bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)\n\n* bind9: bind: Potential wildcard CNAME RPZ policy bypass (CVE-2026-11331)\n\n* bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)\n\n* bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)\n\n* bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)\n\n* bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)\n\n* bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:55441",
        "url": "https://access.redhat.com/errata/RHSA-2026:55441"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2479767",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479767"
      },
      {
        "category": "external",
        "summary": "2479771",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479771"
      },
      {
        "category": "external",
        "summary": "2503721",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503721"
      },
      {
        "category": "external",
        "summary": "2504166",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504166"
      },
      {
        "category": "external",
        "summary": "2504298",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504298"
      },
      {
        "category": "external",
        "summary": "2504338",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504338"
      },
      {
        "category": "external",
        "summary": "2504447",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504447"
      },
      {
        "category": "external",
        "summary": "2504560",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504560"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_55441.json"
      }
    ],
    "title": "Red Hat Security Advisory: bind security update",
    "tracking": {
      "current_release_date": "2026-08-20T15:18:27+00:00",
      "generator": {
        "date": "2026-08-20T15:18:27+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.16"
        }
      },
      "id": "RHSA-2026:55441",
      "initial_release_date": "2026-08-17T04:00:15+00:00",
      "revision_history": [
        {
          "date": "2026-08-17T04:00:15+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-08-17T04:00:15+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-08-20T15:18:27+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
                  "product_id": "AppStream-9.6.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
                "product": {
                  "name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
                  "product_id": "CRB-9.6.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.6::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind-32:9.16.23-31.el9_6.4.src",
                "product": {
                  "name": "bind-32:9.16.23-31.el9_6.4.src",
                  "product_id": "bind-32:9.16.23-31.el9_6.4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind@9.16.23-31.el9_6.4?arch=src\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind-32:9.16.23-31.el9_6.4.aarch64",
                "product": {
                  "name": "bind-32:9.16.23-31.el9_6.4.aarch64",
                  "product_id": "bind-32:9.16.23-31.el9_6.4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind@9.16.23-31.el9_6.4?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
                "product": {
                  "name": "bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
                  "product_id": "bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-chroot@9.16.23-31.el9_6.4?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
                "product": {
                  "name": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
                  "product_id": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-dnssec-utils@9.16.23-31.el9_6.4?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-libs-32:9.16.23-31.el9_6.4.aarch64",
                "product": {
                  "name": "bind-libs-32:9.16.23-31.el9_6.4.aarch64",
                  "product_id": "bind-libs-32:9.16.23-31.el9_6.4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-libs@9.16.23-31.el9_6.4?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-utils-32:9.16.23-31.el9_6.4.aarch64",
                "product": {
                  "name": "bind-utils-32:9.16.23-31.el9_6.4.aarch64",
                  "product_id": "bind-utils-32:9.16.23-31.el9_6.4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-utils@9.16.23-31.el9_6.4?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
                "product": {
                  "name": "bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
                  "product_id": "bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-debugsource@9.16.23-31.el9_6.4?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
                "product": {
                  "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
                  "product_id": "bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-debuginfo@9.16.23-31.el9_6.4?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
                "product": {
                  "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
                  "product_id": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-dnssec-utils-debuginfo@9.16.23-31.el9_6.4?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
                "product": {
                  "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
                  "product_id": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-libs-debuginfo@9.16.23-31.el9_6.4?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
                "product": {
                  "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
                  "product_id": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-utils-debuginfo@9.16.23-31.el9_6.4?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-devel-32:9.16.23-31.el9_6.4.aarch64",
                "product": {
                  "name": "bind-devel-32:9.16.23-31.el9_6.4.aarch64",
                  "product_id": "bind-devel-32:9.16.23-31.el9_6.4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-devel@9.16.23-31.el9_6.4?arch=aarch64\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind-32:9.16.23-31.el9_6.4.ppc64le",
                "product": {
                  "name": "bind-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_id": "bind-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind@9.16.23-31.el9_6.4?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
                "product": {
                  "name": "bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_id": "bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-chroot@9.16.23-31.el9_6.4?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
                "product": {
                  "name": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_id": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-dnssec-utils@9.16.23-31.el9_6.4?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
                "product": {
                  "name": "bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_id": "bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-libs@9.16.23-31.el9_6.4?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
                "product": {
                  "name": "bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_id": "bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-utils@9.16.23-31.el9_6.4?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
                "product": {
                  "name": "bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_id": "bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-debugsource@9.16.23-31.el9_6.4?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
                "product": {
                  "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_id": "bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-debuginfo@9.16.23-31.el9_6.4?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
                "product": {
                  "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_id": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-dnssec-utils-debuginfo@9.16.23-31.el9_6.4?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
                "product": {
                  "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_id": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-libs-debuginfo@9.16.23-31.el9_6.4?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
                "product": {
                  "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_id": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-utils-debuginfo@9.16.23-31.el9_6.4?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
                "product": {
                  "name": "bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_id": "bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-devel@9.16.23-31.el9_6.4?arch=ppc64le\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind-32:9.16.23-31.el9_6.4.s390x",
                "product": {
                  "name": "bind-32:9.16.23-31.el9_6.4.s390x",
                  "product_id": "bind-32:9.16.23-31.el9_6.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind@9.16.23-31.el9_6.4?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-chroot-32:9.16.23-31.el9_6.4.s390x",
                "product": {
                  "name": "bind-chroot-32:9.16.23-31.el9_6.4.s390x",
                  "product_id": "bind-chroot-32:9.16.23-31.el9_6.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-chroot@9.16.23-31.el9_6.4?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
                "product": {
                  "name": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
                  "product_id": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-dnssec-utils@9.16.23-31.el9_6.4?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-libs-32:9.16.23-31.el9_6.4.s390x",
                "product": {
                  "name": "bind-libs-32:9.16.23-31.el9_6.4.s390x",
                  "product_id": "bind-libs-32:9.16.23-31.el9_6.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-libs@9.16.23-31.el9_6.4?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-utils-32:9.16.23-31.el9_6.4.s390x",
                "product": {
                  "name": "bind-utils-32:9.16.23-31.el9_6.4.s390x",
                  "product_id": "bind-utils-32:9.16.23-31.el9_6.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-utils@9.16.23-31.el9_6.4?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
                "product": {
                  "name": "bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
                  "product_id": "bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-debugsource@9.16.23-31.el9_6.4?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
                "product": {
                  "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
                  "product_id": "bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-debuginfo@9.16.23-31.el9_6.4?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
                "product": {
                  "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
                  "product_id": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-dnssec-utils-debuginfo@9.16.23-31.el9_6.4?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
                "product": {
                  "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
                  "product_id": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-libs-debuginfo@9.16.23-31.el9_6.4?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
                "product": {
                  "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
                  "product_id": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-utils-debuginfo@9.16.23-31.el9_6.4?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-devel-32:9.16.23-31.el9_6.4.s390x",
                "product": {
                  "name": "bind-devel-32:9.16.23-31.el9_6.4.s390x",
                  "product_id": "bind-devel-32:9.16.23-31.el9_6.4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-devel@9.16.23-31.el9_6.4?arch=s390x\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind-32:9.16.23-31.el9_6.4.x86_64",
                "product": {
                  "name": "bind-32:9.16.23-31.el9_6.4.x86_64",
                  "product_id": "bind-32:9.16.23-31.el9_6.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind@9.16.23-31.el9_6.4?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
                "product": {
                  "name": "bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
                  "product_id": "bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-chroot@9.16.23-31.el9_6.4?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
                "product": {
                  "name": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
                  "product_id": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-dnssec-utils@9.16.23-31.el9_6.4?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-libs-32:9.16.23-31.el9_6.4.x86_64",
                "product": {
                  "name": "bind-libs-32:9.16.23-31.el9_6.4.x86_64",
                  "product_id": "bind-libs-32:9.16.23-31.el9_6.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-libs@9.16.23-31.el9_6.4?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-utils-32:9.16.23-31.el9_6.4.x86_64",
                "product": {
                  "name": "bind-utils-32:9.16.23-31.el9_6.4.x86_64",
                  "product_id": "bind-utils-32:9.16.23-31.el9_6.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-utils@9.16.23-31.el9_6.4?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
                "product": {
                  "name": "bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
                  "product_id": "bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-debugsource@9.16.23-31.el9_6.4?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
                "product": {
                  "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
                  "product_id": "bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-debuginfo@9.16.23-31.el9_6.4?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
                "product": {
                  "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
                  "product_id": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-dnssec-utils-debuginfo@9.16.23-31.el9_6.4?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
                "product": {
                  "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
                  "product_id": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-libs-debuginfo@9.16.23-31.el9_6.4?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
                "product": {
                  "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
                  "product_id": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-utils-debuginfo@9.16.23-31.el9_6.4?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-devel-32:9.16.23-31.el9_6.4.x86_64",
                "product": {
                  "name": "bind-devel-32:9.16.23-31.el9_6.4.x86_64",
                  "product_id": "bind-devel-32:9.16.23-31.el9_6.4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-devel@9.16.23-31.el9_6.4?arch=x86_64\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
                "product": {
                  "name": "bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
                  "product_id": "bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-dnssec-doc@9.16.23-31.el9_6.4?arch=noarch\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-license-32:9.16.23-31.el9_6.4.noarch",
                "product": {
                  "name": "bind-license-32:9.16.23-31.el9_6.4.noarch",
                  "product_id": "bind-license-32:9.16.23-31.el9_6.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-license@9.16.23-31.el9_6.4?arch=noarch\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "python3-bind-32:9.16.23-31.el9_6.4.noarch",
                "product": {
                  "name": "python3-bind-32:9.16.23-31.el9_6.4.noarch",
                  "product_id": "python3-bind-32:9.16.23-31.el9_6.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/python3-bind@9.16.23-31.el9_6.4?arch=noarch\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-doc-32:9.16.23-31.el9_6.4.noarch",
                "product": {
                  "name": "bind-doc-32:9.16.23-31.el9_6.4.noarch",
                  "product_id": "bind-doc-32:9.16.23-31.el9_6.4.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-doc@9.16.23-31.el9_6.4?arch=noarch\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind-devel-32:9.16.23-31.el9_6.4.i686",
                "product": {
                  "name": "bind-devel-32:9.16.23-31.el9_6.4.i686",
                  "product_id": "bind-devel-32:9.16.23-31.el9_6.4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-devel@9.16.23-31.el9_6.4?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-libs-32:9.16.23-31.el9_6.4.i686",
                "product": {
                  "name": "bind-libs-32:9.16.23-31.el9_6.4.i686",
                  "product_id": "bind-libs-32:9.16.23-31.el9_6.4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-libs@9.16.23-31.el9_6.4?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-debugsource-32:9.16.23-31.el9_6.4.i686",
                "product": {
                  "name": "bind-debugsource-32:9.16.23-31.el9_6.4.i686",
                  "product_id": "bind-debugsource-32:9.16.23-31.el9_6.4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-debugsource@9.16.23-31.el9_6.4?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
                "product": {
                  "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
                  "product_id": "bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-debuginfo@9.16.23-31.el9_6.4?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
                "product": {
                  "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
                  "product_id": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-dnssec-utils-debuginfo@9.16.23-31.el9_6.4?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
                "product": {
                  "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
                  "product_id": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-libs-debuginfo@9.16.23-31.el9_6.4?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
                "product": {
                  "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
                  "product_id": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind-utils-debuginfo@9.16.23-31.el9_6.4?arch=i686\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-32:9.16.23-31.el9_6.4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src"
        },
        "product_reference": "bind-32:9.16.23-31.el9_6.4.src",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-chroot-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-chroot-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-chroot-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-chroot-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-chroot-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debugsource-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch"
        },
        "product_reference": "bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-libs-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-libs-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-libs-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-license-32:9.16.23-31.el9_6.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch"
        },
        "product_reference": "bind-license-32:9.16.23-31.el9_6.4.noarch",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-utils-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-utils-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-utils-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-utils-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-utils-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-utils-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-utils-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "python3-bind-32:9.16.23-31.el9_6.4.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch"
        },
        "product_reference": "python3-bind-32:9.16.23-31.el9_6.4.noarch",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686"
        },
        "product_reference": "bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debugsource-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debugsource-32:9.16.23-31.el9_6.4.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686"
        },
        "product_reference": "bind-debugsource-32:9.16.23-31.el9_6.4.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debugsource-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-debugsource-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-devel-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-devel-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-devel-32:9.16.23-31.el9_6.4.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686"
        },
        "product_reference": "bind-devel-32:9.16.23-31.el9_6.4.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-devel-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-devel-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-devel-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-devel-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-devel-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686"
        },
        "product_reference": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-doc-32:9.16.23-31.el9_6.4.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch"
        },
        "product_reference": "bind-doc-32:9.16.23-31.el9_6.4.noarch",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-32:9.16.23-31.el9_6.4.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
        },
        "product_reference": "bind-libs-32:9.16.23-31.el9_6.4.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686"
        },
        "product_reference": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64"
        },
        "product_reference": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686"
        },
        "product_reference": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le"
        },
        "product_reference": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x"
        },
        "product_reference": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        },
        "product_reference": "bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-3039",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-05-19T09:48:19.212000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2479767"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending maliciously-constructed packets to BIND servers configured for TKEY-based authentication via GSS-API (Generic Security Service Application Program Interface) tokens. This can lead to excessive memory consumption, resulting in a Denial of Service (DoS) for the affected server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: BIND servers configured for TKEY-based GSS-API authentication are vulnerable to memory exhaustion when processing maliciously-constructed packets. This can lead to a denial of service, specifically impacting Red Hat deployments integrated with Active Directory or Kerberos for DNS where this authentication method is enabled.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-3039"
        },
        {
          "category": "external",
          "summary": "RHBZ#2479767",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479767"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-3039",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-3039"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3039",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3039"
        }
      ],
      "release_date": "2026-05-21T12:24:11.051000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T04:00:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55441"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nExample:\n```bash\n# Edit /etc/named.conf and remove or comment out lines related to tkey-gssapi-keytab or tkey-gssapi-credential.\n# For example, remove or comment out:\n# key \"gssapi-key\" {\n#     algorithm GSSAPI;\n#     secret \"BASE64_ENCODED_KEY\";\n# };\n#\n# Then reload the named service:\nsystemctl reload named\n```\nReloading the `named` service may cause a brief interruption in DNS resolution.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation"
    },
    {
      "cve": "CVE-2026-5946",
      "cwe": {
        "id": "CWE-1287",
        "name": "Improper Validation of Specified Type of Input"
      },
      "discovery_date": "2026-05-19T09:57:49.705000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2479771"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the bind component, specifically within the `named` daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System (DNS) messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the `named` daemon when processed. Successful exploitation leads to an application level Denial of Service (DoS), making the DNS service unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: BIND: Denial of Service via specially crafted DNS messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important denial of service vulnerability. The `named` daemon is susceptible to crashes when processing specially crafted DNS messages that utilize non-Internet (IN) classes or meta-classes. This can lead to service unavailability if an attacker sends malicious requests targeting recursion, dynamic updates, zone change notifications, or specific record type processing.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-5946"
        },
        {
          "category": "external",
          "summary": "RHBZ#2479771",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479771"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-5946",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-5946"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5946",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5946"
        }
      ],
      "release_date": "2026-05-21T12:32:55.602000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T04:00:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55441"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: BIND: Denial of Service via specially crafted DNS messages"
    },
    {
      "cve": "CVE-2026-10723",
      "cwe": {
        "id": "CWE-345",
        "name": "Insufficient Verification of Data Authenticity"
      },
      "discovery_date": "2026-07-21T21:13:55.893000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504560"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: bind9: Incorrect acceptance of NSEC3 records",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate flaw in BIND allows an attacker to forge authenticated NXDOMAIN responses for sibling zones due to incorrect validation of child-zone NSEC3 records. Exploitation requires high attack complexity, limiting the immediate risk to Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-10723"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504560",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504560"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-10723",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-10723"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10723",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10723"
        }
      ],
      "release_date": "2026-07-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T04:00:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55441"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "bind: bind9: Incorrect acceptance of NSEC3 records"
    },
    {
      "cve": "CVE-2026-11331",
      "discovery_date": "2026-07-21T16:15:37.317000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2503721"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of the BIND 9 software.\nThis issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind9: bind: Potential wildcard CNAME RPZ policy bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-11331"
        },
        {
          "category": "external",
          "summary": "RHBZ#2503721",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503721"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-11331",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-11331"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11331",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11331"
        }
      ],
      "release_date": "2026-07-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T04:00:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55441"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind9: bind: Potential wildcard CNAME RPZ policy bypass"
    },
    {
      "cve": "CVE-2026-11622",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2026-07-21T20:12:07.757000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504298"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the max-cache-size parameter",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: bind9: Potential memory usage beyond configured limits",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in BIND\u0027s DNSSEC-validating resolver can lead to a denial of service. An attacker can trigger excessive memory usage by performing a random subdomain attack against a DNSSEC-signed zone, causing the resolver to exceed its `max-cache-size` limits. This is critical for Red Hat deployments where BIND is configured for DNSSEC validation and exposed to untrusted query sources.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-11622"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504298",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504298"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-11622",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-11622"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11622",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11622"
        }
      ],
      "release_date": "2026-07-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T04:00:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55441"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: bind9: Potential memory usage beyond configured limits"
    },
    {
      "cve": "CVE-2026-11721",
      "cwe": {
        "id": "CWE-345",
        "name": "Insufficient Verification of Data Authenticity"
      },
      "discovery_date": "2026-07-21T20:22:21.905000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504338"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It is possible for an attacker\u0027s zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes named to produce a wildcard name for a zone that is shorter than the attacker\u0027s zone, which can result in cache poisoning. For this attack to have any effect, the resolver under attack must have set synth-from-dnssec yes; (which is the default).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-11721"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504338",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504338"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-11721",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-11721"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11721",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11721"
        }
      ],
      "release_date": "2026-07-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T04:00:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55441"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards"
    },
    {
      "cve": "CVE-2026-13204",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-07-21T20:41:55.541000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504447"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: bind9: Unexpected exit with NSEC and NSEC3 both present",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13204"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504447",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504447"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13204",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13204"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13204",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13204"
        }
      ],
      "release_date": "2026-07-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T04:00:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55441"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: bind9: Unexpected exit with NSEC and NSEC3 both present"
    },
    {
      "cve": "CVE-2026-13321",
      "discovery_date": "2026-07-21T19:40:30.464000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504166"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The BIND resolver accepts validly-signed NSEC records where the \"Next Domain Name\" field points outside the signer\u0027s zone.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An attacker controlling any DNSSEC-signed zone can craft NSEC records that span into victim zones, enabling cross-zone cache poisoning with authenticated denial-of-service responses (AD=1).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
          "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
          "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13321"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504166",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504166"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13321",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13321"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13321",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13321"
        }
      ],
      "release_date": "2026-07-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-08-17T04:00:15+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:55441"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.src",
            "AppStream-9.6.0.Z.EUS:bind-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-chroot-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-doc-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-license-32:9.16.23-31.el9_6.4.noarch",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "AppStream-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "AppStream-9.6.0.Z.EUS:python3-bind-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-debugsource-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-devel-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-dnssec-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-doc-32:9.16.23-31.el9_6.4.noarch",
            "CRB-9.6.0.Z.EUS:bind-libs-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-libs-debuginfo-32:9.16.23-31.el9_6.4.x86_64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.aarch64",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.i686",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.ppc64le",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.s390x",
            "CRB-9.6.0.Z.EUS:bind-utils-debuginfo-32:9.16.23-31.el9_6.4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.