Vulnerability-Lookup

RHSA-2026:94278

Vulnerability from csaf_redhat - Published: 2026-11-03 03:58 - Updated: 2026-11-07 11:39

Summary

Red Hat Security Advisory: bind9.18 security, bug fix, and enhancement update

Severity

Important

Notes

Topic: An update for bind9.18 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly. Security Fix(es): * bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039) * bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946) * bind: bind: Denial of Service via long query names in RPZ processing (CVE-2026-11331) * bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321) * bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622) * bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721) * bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204) * bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723) * bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records (CVE-2026-81736) * bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667) * bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing (CVE-2026-81563) * bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274) * bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666) * bind: BIND: Denial of Service via unbounded processing of crafted DNS messages (CVE-2026-19630) * bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay (CVE-2026-94300) * bind: bind: Denial of Service via assertion failure during redirect processing (CVE-2026-96888) * bind: bind: Denial of service via assertion failure in RPZ query processing (CVE-2026-97313) Bug Fix(es) and Enhancement(s): * bind9.18: New root trust anchor key for DNSSEC [rhel-9.6.z] (JIRA:RHEL-255222) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-3039

A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending maliciously-constructed packets to BIND servers configured for TKEY-based authentication via GSS-API (Generic Security Service Application Program Interface) tokens. This can lead to excessive memory consumption, resulting in a Denial of Service (DoS) for the affected server.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 10 products

Product	Version	Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686	—	Vendor Fix fix Workaround

Known not affected 63 products

Product	Version	Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x	—	Workaround
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x	—	Workaround
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64	—	Workaround

Threats

Impact Important

CVE-2026-5946

A flaw was found in the bind component, specifically within the `named` daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System (DNS) messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the `named` daemon when processed. Successful exploitation leads to an application level Denial of Service (DoS), making the DNS service unavailable.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1287 - Improper Validation of Specified Type of Input

Affected products

Fixed 10 products, the same list as for CVE-2026-3039

Known not affected 63 products, the same list as for CVE-2026-3039

Threats

Impact Important

CVE-2026-10723

BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

CWE-345 - Insufficient Verification of Data Authenticity

Affected products

Fixed 10 products, the same list as for CVE-2026-3039

Known not affected 63 products, the same list as for CVE-2026-3039

Threats

Impact Moderate

CVE-2026-11331

A flaw was found in BIND. A remote attacker can send specially crafted, excessively long query names to a resolver configured with Response Policy Zones (RPZ) and wildcard policies. Improper handling of the resulting error condition can cause the service to terminate unexpectedly, leading to a Denial of Service (DoS), or allow the attacker to bypass RPZ security filtering rules.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-394 - Unexpected Status Code or Return Value

Affected products

Fixed 10 products, the same list as for CVE-2026-3039

Known not affected 63 products, the same list as for CVE-2026-3039

Threats

Impact Important

CVE-2026-11622

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Fixed 10 products, the same list as for CVE-2026-3039

Known not affected 63 products, the same list as for CVE-2026-3039

Threats

Impact Important

CVE-2026-11721

It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes named to produce a wildcard name for a zone that is shorter than the attacker's zone, which can result in cache poisoning. For this attack to have any effect, the resolver under attack must have set synth-from-dnssec yes; (which is the default).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-345 - Insufficient Verification of Data Authenticity

Affected products

Fixed 14 products

Product	Version	Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x	—	Vendor Fix fix
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64	—	Vendor Fix fix
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686	—	Vendor Fix fix

Known not affected 59 products

Product	Identifier	Version	Remediation
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x		—
Unresolved product id: AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x		—
Unresolved product id: CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64		—

Threats

Impact Important

CVE-2026-13204

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 10 products, the same list as for CVE-2026-3039

Known not affected 63 products, the same list as for CVE-2026-3039

Threats

Impact Important

CVE-2026-13321

The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone.

8.6 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

CWE-345 - Insufficient Verification of Data Authenticity

Affected products

Fixed 10 products, the same list as for CVE-2026-3039

Known not affected 63 products, the same list as for CVE-2026-3039

Threats

Impact Important

CVE-2026-19630

A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending specially crafted Domain Name System (DNS) protocol messages containing an excessive number of specific structures. Because BIND does not impose a limit on processing these structures, handling the malicious request consumes disproportionate amounts of CPU time and memory, resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 10 products, the same list as for CVE-2026-3039

Known not affected 63 products, the same list as for CVE-2026-3039

Threats

Impact Important

CVE-2026-19666

A flaw was found in BIND. When a resolver is configured to use DNS64, a specially crafted, malformed answer from an authoritative server can cause the `named` process to exit unexpectedly. This can lead to a Denial of Service (DoS) for clients relying on the affected resolver.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 10 products, the same list as for CVE-2026-3039

Known not affected 63 products, the same list as for CVE-2026-3039

Threats

Impact Important

CVE-2026-19667

A flaw was found in `bind9`'s `named` component. A remote attacker, by sending a specially crafted DNS negative answer of exactly 65536 bytes from an authoritative server, can cause a 16-bit length truncation. This results in a zero-byte negative cache entry. When `named` attempts to read this invalid entry, it will unexpectedly terminate, leading to a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Fixed 10 products, the same list as for CVE-2026-3039

Known not affected 63 products, the same list as for CVE-2026-3039

Threats

Impact Important

CVE-2026-80274

A flaw was found in BIND. A remote attacker, by sending a specially crafted DNSSEC-signed authoritative zone reply, can trigger an unexpected program exit in the validating resolver. This can lead to a Denial of Service (DoS) for the affected BIND resolver.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 10 products, the same list as for CVE-2026-3039

Known not affected 63 products, the same list as for CVE-2026-3039

Threats

Impact Important

CVE-2026-81563

A flaw was found in the BIND resolver. A remote attacker could exploit a vulnerability in the processing of SVCB/HTTPS AliasMode records that reference numerous ServiceMode records. This could lead to the resolver failing to properly release internal resources, causing resource exhaustion. Repeated exploitation would prevent the resolver from performing new recursive lookups, resulting in a Denial of Service (DoS).

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-772 - Missing Release of Resource after Effective Lifetime

Affected products

Fixed 10 products, the same list as for CVE-2026-3039

Known not affected 63 products, the same list as for CVE-2026-3039

Threats

Impact Important

CVE-2026-81736

A flaw was found in BIND 9. A remote attacker can exploit this vulnerability by querying a BIND resolver for the root of a specially crafted, cached tree of SVCB/HTTPS AliasMode records. This action causes the resolver to spend a disproportionate amount of CPU time constructing the response, leading to a denial of service (DoS) condition. This can make the affected BIND 9 resolver unresponsive to legitimate requests.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 10 products, the same list as for CVE-2026-3039

Known not affected 63 products, the same list as for CVE-2026-3039

Threats

Impact Important

CVE-2026-94300

A flaw was found in BIND. This vulnerability may allow a remote attacker to achieve arbitrary code execution on the target server. An attacker who captures a valid User Datagram Protocol (UDP) message signed with Generic Security Service Transaction Signature (GSS-TSIG) can replay it while the negotiated key is active. When combined with crafted queries directed to an attacker-controlled DNS zone, this triggers memory corruption in the named service.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-366 - Race Condition within a Thread

Affected products

Fixed 10 products, the same list as for CVE-2026-3039

Known not affected 63 products, the same list as for CVE-2026-3039

Threats

Impact Important

CVE-2026-96888

A flaw was found in BIND. A remote attacker can cause a Denial of Service (DoS) by sending requests that trigger an assertion failure, abruptly terminating the resolver daemon. This vulnerability occurs when the resolver is configured with both a redirect zone and strict query name minimization while processing redirected queries.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 10 products, the same list as for CVE-2026-3039

Known not affected 63 products, the same list as for CVE-2026-3039

Threats

Impact Important

CVE-2026-97313

A flaw was found in BIND. A remote attacker can cause a denial of service (DoS) by sending a sequence of recursive and non-recursive queries to an affected server. When BIND is configured to handle recursive queries alongside multiple Response Policy Zones (RPZ) with differing recursion settings, processing these queries triggers an assertion failure. This failure causes the service to crash and terminate abruptly.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-617 - Reachable Assertion

Affected products

Fixed 10 products, the same list as for CVE-2026-3039

Known not affected 63 products, the same list as for CVE-2026-3039

Threats

Impact Important

References

99 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:94278	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2479767	external
https://bugzilla.redhat.com/show_bug.cgi?id=2479771	external
https://bugzilla.redhat.com/show_bug.cgi?id=2503721	external
https://bugzilla.redhat.com/show_bug.cgi?id=2504166	external
https://bugzilla.redhat.com/show_bug.cgi?id=2504298	external
https://bugzilla.redhat.com/show_bug.cgi?id=2504338	external
https://bugzilla.redhat.com/show_bug.cgi?id=2504447	external
https://bugzilla.redhat.com/show_bug.cgi?id=2504560	external
https://bugzilla.redhat.com/show_bug.cgi?id=2535432	external
https://bugzilla.redhat.com/show_bug.cgi?id=2535435	external
https://bugzilla.redhat.com/show_bug.cgi?id=2535461	external
https://bugzilla.redhat.com/show_bug.cgi?id=2535466	external
https://bugzilla.redhat.com/show_bug.cgi?id=2535477	external
https://bugzilla.redhat.com/show_bug.cgi?id=2556406	external
https://bugzilla.redhat.com/show_bug.cgi?id=2556407	external
https://bugzilla.redhat.com/show_bug.cgi?id=2556413	external
https://bugzilla.redhat.com/show_bug.cgi?id=2556415	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-3039	self
https://bugzilla.redhat.com/show_bug.cgi?id=2479767	external
https://www.cve.org/CVERecord?id=CVE-2026-3039	external
https://nvd.nist.gov/vuln/detail/CVE-2026-3039	external
https://access.redhat.com/security/cve/CVE-2026-5946	self
https://bugzilla.redhat.com/show_bug.cgi?id=2479771	external
https://www.cve.org/CVERecord?id=CVE-2026-5946	external
https://nvd.nist.gov/vuln/detail/CVE-2026-5946	external
https://access.redhat.com/security/cve/CVE-2026-10723	self
https://bugzilla.redhat.com/show_bug.cgi?id=2504560	external
https://www.cve.org/CVERecord?id=CVE-2026-10723	external
https://nvd.nist.gov/vuln/detail/CVE-2026-10723	external
https://access.redhat.com/security/cve/CVE-2026-11331	self
https://bugzilla.redhat.com/show_bug.cgi?id=2503721	external
https://www.cve.org/CVERecord?id=CVE-2026-11331	external
https://nvd.nist.gov/vuln/detail/CVE-2026-11331	external
https://access.redhat.com/security/cve/CVE-2026-11622	self
https://bugzilla.redhat.com/show_bug.cgi?id=2504298	external
https://www.cve.org/CVERecord?id=CVE-2026-11622	external
https://nvd.nist.gov/vuln/detail/CVE-2026-11622	external
https://access.redhat.com/security/cve/CVE-2026-11721	self
https://bugzilla.redhat.com/show_bug.cgi?id=2504338	external
https://www.cve.org/CVERecord?id=CVE-2026-11721	external
https://nvd.nist.gov/vuln/detail/CVE-2026-11721	external
https://access.redhat.com/security/cve/CVE-2026-13204	self
https://bugzilla.redhat.com/show_bug.cgi?id=2504447	external
https://www.cve.org/CVERecord?id=CVE-2026-13204	external
https://nvd.nist.gov/vuln/detail/CVE-2026-13204	external
https://access.redhat.com/security/cve/CVE-2026-13321	self
https://bugzilla.redhat.com/show_bug.cgi?id=2504166	external
https://www.cve.org/CVERecord?id=CVE-2026-13321	external
https://nvd.nist.gov/vuln/detail/CVE-2026-13321	external
https://access.redhat.com/security/cve/CVE-2026-19630	self
https://bugzilla.redhat.com/show_bug.cgi?id=2556406	external
https://www.cve.org/CVERecord?id=CVE-2026-19630	external
https://nvd.nist.gov/vuln/detail/CVE-2026-19630	external
https://kb.isc.org/docs/cve-2026-19630	external
https://access.redhat.com/security/cve/CVE-2026-19666	self
https://bugzilla.redhat.com/show_bug.cgi?id=2535477	external
https://www.cve.org/CVERecord?id=CVE-2026-19666	external
https://nvd.nist.gov/vuln/detail/CVE-2026-19666	external
https://downloads.isc.org/isc/bind9/9.20.29	external
https://downloads.isc.org/isc/bind9/9.21.26	external
https://kb.isc.org/docs/cve-2026-19666	external
https://access.redhat.com/security/cve/CVE-2026-19667	self
https://bugzilla.redhat.com/show_bug.cgi?id=2535435	external
https://www.cve.org/CVERecord?id=CVE-2026-19667	external
https://nvd.nist.gov/vuln/detail/CVE-2026-19667	external
https://kb.isc.org/docs/cve-2026-19667	external
https://access.redhat.com/security/cve/CVE-2026-80274	self
https://bugzilla.redhat.com/show_bug.cgi?id=2535466	external
https://www.cve.org/CVERecord?id=CVE-2026-80274	external
https://nvd.nist.gov/vuln/detail/CVE-2026-80274	external
https://kb.isc.org/docs/cve-2026-80274	external
https://access.redhat.com/security/cve/CVE-2026-81563	self
https://bugzilla.redhat.com/show_bug.cgi?id=2535461	external
https://www.cve.org/CVERecord?id=CVE-2026-81563	external
https://nvd.nist.gov/vuln/detail/CVE-2026-81563	external
https://kb.isc.org/docs/cve-2026-81563	external
https://access.redhat.com/security/cve/CVE-2026-81736	self
https://bugzilla.redhat.com/show_bug.cgi?id=2535432	external
https://www.cve.org/CVERecord?id=CVE-2026-81736	external
https://nvd.nist.gov/vuln/detail/CVE-2026-81736	external
https://kb.isc.org/docs/cve-2026-81736	external
https://access.redhat.com/security/cve/CVE-2026-94300	self
https://bugzilla.redhat.com/show_bug.cgi?id=2556407	external
https://www.cve.org/CVERecord?id=CVE-2026-94300	external
https://nvd.nist.gov/vuln/detail/CVE-2026-94300	external
https://kb.isc.org/docs/cve-2026-94300	external
https://access.redhat.com/security/cve/CVE-2026-96888	self
https://bugzilla.redhat.com/show_bug.cgi?id=2556413	external
https://www.cve.org/CVERecord?id=CVE-2026-96888	external
https://nvd.nist.gov/vuln/detail/CVE-2026-96888	external
https://kb.isc.org/docs/cve-2026-96888	external
https://access.redhat.com/security/cve/CVE-2026-97313	self
https://bugzilla.redhat.com/show_bug.cgi?id=2556415	external
https://www.cve.org/CVERecord?id=CVE-2026-97313	external
https://nvd.nist.gov/vuln/detail/CVE-2026-97313	external
https://kb.isc.org/docs/cve-2026-97313	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for bind9.18 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.\n\nSecurity Fix(es):\n\n* bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039)\n\n* bind: BIND: Denial of Service via specially crafted DNS messages (CVE-2026-5946)\n\n* bind: bind: Denial of Service via long query names in RPZ processing (CVE-2026-11331)\n\n* bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field (CVE-2026-13321)\n\n* bind: bind9: Potential memory usage beyond configured limits (CVE-2026-11622)\n\n* bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards (CVE-2026-11721)\n\n* bind: bind9: Unexpected exit with NSEC and NSEC3 both present (CVE-2026-13204)\n\n* bind: bind9: Incorrect acceptance of NSEC3 records (CVE-2026-10723)\n\n* bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records (CVE-2026-81736)\n\n* bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling (CVE-2026-19667)\n\n* bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing (CVE-2026-81563)\n\n* bind: BIND: Denial of Service via crafted DNSSEC reply (CVE-2026-80274)\n\n* bind: BIND: Denial of Service via malformed DNS64 responses (CVE-2026-19666)\n\n* bind: BIND: Denial of Service via unbounded processing of crafted DNS messages (CVE-2026-19630)\n\n* bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay (CVE-2026-94300)\n\n* bind: bind: Denial of Service via assertion failure during redirect processing (CVE-2026-96888)\n\n* bind: bind: Denial of service via assertion failure in RPZ query processing (CVE-2026-97313)\n\nBug Fix(es) and Enhancement(s):\n\n* bind9.18: New root trust anchor key for DNSSEC [rhel-9.6.z] (JIRA:RHEL-255222)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:94278",
        "url": "https://access.redhat.com/errata/RHSA-2026:94278"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2479767",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479767"
      },
      {
        "category": "external",
        "summary": "2479771",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479771"
      },
      {
        "category": "external",
        "summary": "2503721",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503721"
      },
      {
        "category": "external",
        "summary": "2504166",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504166"
      },
      {
        "category": "external",
        "summary": "2504298",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504298"
      },
      {
        "category": "external",
        "summary": "2504338",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504338"
      },
      {
        "category": "external",
        "summary": "2504447",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504447"
      },
      {
        "category": "external",
        "summary": "2504560",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504560"
      },
      {
        "category": "external",
        "summary": "2535432",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535432"
      },
      {
        "category": "external",
        "summary": "2535435",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535435"
      },
      {
        "category": "external",
        "summary": "2535461",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535461"
      },
      {
        "category": "external",
        "summary": "2535466",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535466"
      },
      {
        "category": "external",
        "summary": "2535477",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535477"
      },
      {
        "category": "external",
        "summary": "2556406",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556406"
      },
      {
        "category": "external",
        "summary": "2556407",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556407"
      },
      {
        "category": "external",
        "summary": "2556413",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556413"
      },
      {
        "category": "external",
        "summary": "2556415",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556415"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_94278.json"
      }
    ],
    "title": "Red Hat Security Advisory: bind9.18 security, bug fix, and enhancement update",
    "tracking": {
      "current_release_date": "2026-11-07T11:39:33+00:00",
      "generator": {
        "date": "2026-11-07T11:39:33+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.5"
        }
      },
      "id": "RHSA-2026:94278",
      "initial_release_date": "2026-11-03T03:58:39+00:00",
      "revision_history": [
        {
          "date": "2026-11-03T03:58:39+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-11-03T03:58:39+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-11-07T11:39:33+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
                  "product_id": "AppStream-9.6.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.6::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
                "product": {
                  "name": "Red Hat CodeReady Linux Builder EUS (v.9.6)",
                  "product_id": "CRB-9.6.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.6::crb"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind9.18-32:9.18.29-4.el9_6.5.src",
                "product": {
                  "name": "bind9.18-32:9.18.29-4.el9_6.5.src",
                  "product_id": "bind9.18-32:9.18.29-4.el9_6.5.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18@9.18.29-4.el9_6.5?arch=src\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind9.18-32:9.18.29-4.el9_6.5.aarch64",
                "product": {
                  "name": "bind9.18-32:9.18.29-4.el9_6.5.aarch64",
                  "product_id": "bind9.18-32:9.18.29-4.el9_6.5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18@9.18.29-4.el9_6.5?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
                "product": {
                  "name": "bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
                  "product_id": "bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-chroot@9.18.29-4.el9_6.5?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
                "product": {
                  "name": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
                  "product_id": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-dnssec-utils@9.18.29-4.el9_6.5?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
                "product": {
                  "name": "bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
                  "product_id": "bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-libs@9.18.29-4.el9_6.5?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
                "product": {
                  "name": "bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
                  "product_id": "bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-utils@9.18.29-4.el9_6.5?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
                "product": {
                  "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
                  "product_id": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-debugsource@9.18.29-4.el9_6.5?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
                "product": {
                  "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
                  "product_id": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-debuginfo@9.18.29-4.el9_6.5?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
                "product": {
                  "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
                  "product_id": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-dnssec-utils-debuginfo@9.18.29-4.el9_6.5?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
                "product": {
                  "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
                  "product_id": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-libs-debuginfo@9.18.29-4.el9_6.5?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
                "product": {
                  "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
                  "product_id": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-utils-debuginfo@9.18.29-4.el9_6.5?arch=aarch64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
                "product": {
                  "name": "bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
                  "product_id": "bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-devel@9.18.29-4.el9_6.5?arch=aarch64\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
                "product": {
                  "name": "bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_id": "bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18@9.18.29-4.el9_6.5?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
                "product": {
                  "name": "bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_id": "bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-chroot@9.18.29-4.el9_6.5?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
                "product": {
                  "name": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_id": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-dnssec-utils@9.18.29-4.el9_6.5?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
                "product": {
                  "name": "bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_id": "bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-libs@9.18.29-4.el9_6.5?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
                "product": {
                  "name": "bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_id": "bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-utils@9.18.29-4.el9_6.5?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
                "product": {
                  "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_id": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-debugsource@9.18.29-4.el9_6.5?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
                "product": {
                  "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_id": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-debuginfo@9.18.29-4.el9_6.5?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
                "product": {
                  "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_id": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-dnssec-utils-debuginfo@9.18.29-4.el9_6.5?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
                "product": {
                  "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_id": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-libs-debuginfo@9.18.29-4.el9_6.5?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
                "product": {
                  "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_id": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-utils-debuginfo@9.18.29-4.el9_6.5?arch=ppc64le\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
                "product": {
                  "name": "bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_id": "bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-devel@9.18.29-4.el9_6.5?arch=ppc64le\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind9.18-32:9.18.29-4.el9_6.5.s390x",
                "product": {
                  "name": "bind9.18-32:9.18.29-4.el9_6.5.s390x",
                  "product_id": "bind9.18-32:9.18.29-4.el9_6.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18@9.18.29-4.el9_6.5?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
                "product": {
                  "name": "bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
                  "product_id": "bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-chroot@9.18.29-4.el9_6.5?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
                "product": {
                  "name": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
                  "product_id": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-dnssec-utils@9.18.29-4.el9_6.5?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
                "product": {
                  "name": "bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
                  "product_id": "bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-libs@9.18.29-4.el9_6.5?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
                "product": {
                  "name": "bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
                  "product_id": "bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-utils@9.18.29-4.el9_6.5?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
                "product": {
                  "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
                  "product_id": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-debugsource@9.18.29-4.el9_6.5?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
                "product": {
                  "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
                  "product_id": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-debuginfo@9.18.29-4.el9_6.5?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
                "product": {
                  "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
                  "product_id": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-dnssec-utils-debuginfo@9.18.29-4.el9_6.5?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
                "product": {
                  "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
                  "product_id": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-libs-debuginfo@9.18.29-4.el9_6.5?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
                "product": {
                  "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
                  "product_id": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-utils-debuginfo@9.18.29-4.el9_6.5?arch=s390x\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
                "product": {
                  "name": "bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
                  "product_id": "bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-devel@9.18.29-4.el9_6.5?arch=s390x\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind9.18-32:9.18.29-4.el9_6.5.x86_64",
                "product": {
                  "name": "bind9.18-32:9.18.29-4.el9_6.5.x86_64",
                  "product_id": "bind9.18-32:9.18.29-4.el9_6.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18@9.18.29-4.el9_6.5?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
                "product": {
                  "name": "bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
                  "product_id": "bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-chroot@9.18.29-4.el9_6.5?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
                "product": {
                  "name": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
                  "product_id": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-dnssec-utils@9.18.29-4.el9_6.5?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
                "product": {
                  "name": "bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
                  "product_id": "bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-libs@9.18.29-4.el9_6.5?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
                "product": {
                  "name": "bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
                  "product_id": "bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-utils@9.18.29-4.el9_6.5?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
                "product": {
                  "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
                  "product_id": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-debugsource@9.18.29-4.el9_6.5?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
                "product": {
                  "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
                  "product_id": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-debuginfo@9.18.29-4.el9_6.5?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
                "product": {
                  "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
                  "product_id": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-dnssec-utils-debuginfo@9.18.29-4.el9_6.5?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
                "product": {
                  "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
                  "product_id": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-libs-debuginfo@9.18.29-4.el9_6.5?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
                "product": {
                  "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
                  "product_id": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-utils-debuginfo@9.18.29-4.el9_6.5?arch=x86_64\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
                "product": {
                  "name": "bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
                  "product_id": "bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-devel@9.18.29-4.el9_6.5?arch=x86_64\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
                "product": {
                  "name": "bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
                  "product_id": "bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-devel@9.18.29-4.el9_6.5?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
                "product": {
                  "name": "bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
                  "product_id": "bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-libs@9.18.29-4.el9_6.5?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
                "product": {
                  "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
                  "product_id": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-debugsource@9.18.29-4.el9_6.5?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
                "product": {
                  "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
                  "product_id": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-debuginfo@9.18.29-4.el9_6.5?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
                "product": {
                  "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
                  "product_id": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-dnssec-utils-debuginfo@9.18.29-4.el9_6.5?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
                "product": {
                  "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
                  "product_id": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-libs-debuginfo@9.18.29-4.el9_6.5?arch=i686\u0026epoch=32"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
                "product": {
                  "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
                  "product_id": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-utils-debuginfo@9.18.29-4.el9_6.5?arch=i686\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
                "product": {
                  "name": "bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
                  "product_id": "bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/bind9.18-doc@9.18.29-4.el9_6.5?arch=noarch\u0026epoch=32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-32:9.18.29-4.el9_6.5.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src"
        },
        "product_reference": "bind9.18-32:9.18.29-4.el9_6.5.src",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-libs-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-utils-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)",
          "product_id": "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "AppStream-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686"
        },
        "product_reference": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686"
        },
        "product_reference": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-devel-32:9.18.29-4.el9_6.5.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686"
        },
        "product_reference": "bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-devel-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686"
        },
        "product_reference": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-doc-32:9.18.29-4.el9_6.5.noarch as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch"
        },
        "product_reference": "bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-libs-32:9.18.29-4.el9_6.5.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        },
        "product_reference": "bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686"
        },
        "product_reference": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64"
        },
        "product_reference": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686"
        },
        "product_reference": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le"
        },
        "product_reference": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x"
        },
        "product_reference": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64 as a component of Red Hat CodeReady Linux Builder EUS (v.9.6)",
          "product_id": "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        },
        "product_reference": "bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
        "relates_to_product_reference": "CRB-9.6.0.Z.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-3039",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-05-19T09:48:19.212000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2479767"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending maliciously-constructed packets to BIND servers configured for TKEY-based authentication via GSS-API (Generic Security Service Application Program Interface) tokens. This can lead to excessive memory consumption, resulting in a Denial of Service (DoS) for the affected server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: BIND servers configured for TKEY-based GSS-API authentication are vulnerable to memory exhaustion when processing maliciously-constructed packets. This can lead to a denial of service, specifically impacting Red Hat deployments integrated with Active Directory or Kerberos for DNS where this authentication method is enabled.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-3039"
        },
        {
          "category": "external",
          "summary": "RHBZ#2479767",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479767"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-3039",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-3039"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3039",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3039"
        }
      ],
      "release_date": "2026-05-21T12:24:11.051000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nExample:\n```bash\n# Edit /etc/named.conf and remove or comment out lines related to tkey-gssapi-keytab or tkey-gssapi-credential.\n# For example, remove or comment out:\n# key \"gssapi-key\" {\n#     algorithm GSSAPI;\n#     secret \"BASE64_ENCODED_KEY\";\n# };\n#\n# Then reload the named service:\nsystemctl reload named\n```\nReloading the `named` service may cause a brief interruption in DNS resolution.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation"
    },
    {
      "cve": "CVE-2026-5946",
      "cwe": {
        "id": "CWE-1287",
        "name": "Improper Validation of Specified Type of Input"
      },
      "discovery_date": "2026-05-19T09:57:49.705000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2479771"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the bind component, specifically within the `named` daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System (DNS) messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the `named` daemon when processed. Successful exploitation leads to an application level Denial of Service (DoS), making the DNS service unavailable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: BIND: Denial of Service via specially crafted DNS messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is rated as an Important denial of service vulnerability. The `named` daemon is susceptible to crashes when processing specially crafted DNS messages that utilize non-Internet (IN) classes or meta-classes. This can lead to service unavailability if an attacker sends malicious requests targeting recursion, dynamic updates, zone change notifications, or specific record type processing.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-5946"
        },
        {
          "category": "external",
          "summary": "RHBZ#2479771",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479771"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-5946",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-5946"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5946",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5946"
        }
      ],
      "release_date": "2026-05-21T12:32:55.602000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: BIND: Denial of Service via specially crafted DNS messages"
    },
    {
      "cve": "CVE-2026-10723",
      "cwe": {
        "id": "CWE-345",
        "name": "Insufficient Verification of Data Authenticity"
      },
      "discovery_date": "2026-07-21T21:13:55.893000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504560"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: bind9: Incorrect acceptance of NSEC3 records",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Moderate flaw in BIND allows an attacker to forge authenticated NXDOMAIN responses for sibling zones due to incorrect validation of child-zone NSEC3 records. Exploitation requires high attack complexity, limiting the immediate risk to Red Hat products.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-10723"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504560",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504560"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-10723",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-10723"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10723",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10723"
        }
      ],
      "release_date": "2026-07-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "bind: bind9: Incorrect acceptance of NSEC3 records"
    },
    {
      "cve": "CVE-2026-11331",
      "cwe": {
        "id": "CWE-394",
        "name": "Unexpected Status Code or Return Value"
      },
      "discovery_date": "2026-07-21T16:15:37.317000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2503721"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BIND. A remote attacker can send specially crafted, excessively long query names to a resolver configured with Response Policy Zones (RPZ) and wildcard policies. Improper handling of the resulting error condition can cause the service to terminate unexpectedly, leading to a Denial of Service (DoS), or allow the attacker to bypass RPZ security filtering rules.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: bind: Denial of Service via long query names in RPZ processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important because an unauthenticated remote client can terminate the DNS resolver service or bypass security filtering policies. In default Red Hat Enterprise Linux installations, Response Policy Zones (RPZ) are not configured and require explicit administrative definition. The flaw poses operational risk primarily to recursive resolvers that actively employ wildcard CNAME rules in their policy zones and accept untrusted network queries.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-11331"
        },
        {
          "category": "external",
          "summary": "RHBZ#2503721",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503721"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-11331",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-11331"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11331",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11331"
        }
      ],
      "release_date": "2026-07-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict resolver access to trusted networks and avoid using wildcard CNAME entries within Response Policy Zones (RPZ).\n\n1. Edit `/etc/named.conf` to limit recursion and query caching to authorized client networks:\n```\nacl trusted_clients {\n    127.0.0.1;\n    192.168.1.0/24;\n};\n\noptions {\n    allow-recursion { trusted_clients; };\n    allow-query-cache { trusted_clients; };\n};\n```\nAdditionally, modify RPZ zone files to remove wildcard CNAME statements (such as `*.example.com CNAME target.com`), replacing them with explicit individual domain entries where feasible.\n\n2. Reload the named service configuration:\n`systemctl reload named`\n\nCaveats:\nRestricting query access prevents untrusted external clients from resolving names through the server. Removing wildcard entries means unlisted subdomains will no longer be intercepted by the policy zone until explicit records are added.\n\nWarning: Reloading or restarting the named daemon may briefly disrupt ongoing DNS resolution.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: bind: Denial of Service via long query names in RPZ processing"
    },
    {
      "cve": "CVE-2026-11622",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "discovery_date": "2026-07-21T20:12:07.757000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504298"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the max-cache-size parameter",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: bind9: Potential memory usage beyond configured limits",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in BIND\u0027s DNSSEC-validating resolver can lead to a denial of service. An attacker can trigger excessive memory usage by performing a random subdomain attack against a DNSSEC-signed zone, causing the resolver to exceed its `max-cache-size` limits. This is critical for Red Hat deployments where BIND is configured for DNSSEC validation and exposed to untrusted query sources.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-11622"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504298",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504298"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-11622",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-11622"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11622",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11622"
        }
      ],
      "release_date": "2026-07-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: bind9: Potential memory usage beyond configured limits"
    },
    {
      "cve": "CVE-2026-11721",
      "cwe": {
        "id": "CWE-345",
        "name": "Insufficient Verification of Data Authenticity"
      },
      "discovery_date": "2026-07-21T20:22:21.905000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504338"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "It is possible for an attacker\u0027s zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes named to produce a wildcard name for a zone that is shorter than the attacker\u0027s zone, which can result in cache poisoning. For this attack to have any effect, the resolver under attack must have set synth-from-dnssec yes; (which is the default).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat has evaluated this vulnerability as Important because a remote, unauthenticated attacker can poison the DNS resolver cache without prior privileges or user interaction, potentially spoofing records across the network. In Red Hat Enterprise Linux environments utilizing BIND as a recursive resolver, this condition is present under default settings. Authoritative-only configurations or isolated instances not performing recursive lookups for untrusted clients remain unaffected.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-11721"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504338",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504338"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-11721",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-11721"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11721",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11721"
        }
      ],
      "release_date": "2026-07-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards"
    },
    {
      "cve": "CVE-2026-13204",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-07-21T20:41:55.541000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504447"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: bind9: Unexpected exit with NSEC and NSEC3 both present",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important because an unauthenticated remote attacker can trigger an abrupt service crash in BIND, resulting in a total denial of service for DNS resolution. In standard Red Hat Enterprise Linux deployments, recursive DNS servers have DNSSEC validation active by default, making them susceptible whenever resolving domains that present contradictory proof records. Systems operating solely as authoritative nameservers without recursion or DNSSEC validation are unaffected by this defect.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13204"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504447",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504447"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13204",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13204"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13204",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13204"
        }
      ],
      "release_date": "2026-07-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: bind9: Unexpected exit with NSEC and NSEC3 both present"
    },
    {
      "cve": "CVE-2026-13321",
      "cwe": {
        "id": "CWE-345",
        "name": "Insufficient Verification of Data Authenticity"
      },
      "discovery_date": "2026-07-21T19:40:30.464000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2504166"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "The BIND resolver accepts validly-signed NSEC records where the \"Next Domain Name\" field points outside the signer\u0027s zone.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "An attacker controlling any DNSSEC-signed zone can craft NSEC records that span into victim zones, enabling cross-zone cache poisoning with authenticated denial-of-service responses (AD=1).",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-13321"
        },
        {
          "category": "external",
          "summary": "RHBZ#2504166",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504166"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-13321",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-13321"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13321",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13321"
        }
      ],
      "release_date": "2026-07-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        },
        {
          "category": "workaround",
          "details": "Disclaimer: The following mitigation notes are provided as a courtesy, pending the application of an official patch. This content was generated utilizing AI tools in conjunction with data from cmetaxonomy.org. Customers are advised to independently evaluate and test these temporary mitigations within their own infrastructure.\n\nISC states no workarounds exist. Until patched, restrict the resolver to authorized client networks and deploy separate resolvers per trust zone. Memory hardening and auth controls don\u0027t apply \u2014 this is a DNS protocol logic error using validly-signed records.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field"
    },
    {
      "cve": "CVE-2026-19630",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-10-20T19:42:24.891000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2556406"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending specially crafted Domain Name System (DNS) protocol messages containing an excessive number of specific structures. Because BIND does not impose a limit on processing these structures, handling the malicious request consumes disproportionate amounts of CPU time and memory, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: BIND: Denial of Service via unbounded processing of crafted DNS messages",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as an Important severity flaw because an unauthenticated remote attacker can exhaust server CPU and memory resources without requiring privileges, resulting in a denial of service. In Red Hat Enterprise Linux and OpenShift environments, the risk primarily affects BIND instances functioning as recursive resolvers exposed to untrusted traffic. Deployments serving strictly authoritative roles or those isolated from untrusted client queries experience significantly lower exposure to this attack vector.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-19630"
        },
        {
          "category": "external",
          "summary": "RHBZ#2556406",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556406"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-19630",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-19630"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19630",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19630"
        },
        {
          "category": "external",
          "summary": "https://kb.isc.org/docs/cve-2026-19630",
          "url": "https://kb.isc.org/docs/cve-2026-19630"
        }
      ],
      "release_date": "2026-10-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: BIND: Denial of Service via unbounded processing of crafted DNS messages"
    },
    {
      "cve": "CVE-2026-19666",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-09-16T14:34:53.189451+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535477"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BIND. When a resolver is configured to use DNS64, a specially crafted, malformed answer from an authoritative server can cause the `named` process to exit unexpectedly. This can lead to a Denial of Service (DoS) for clients relying on the affected resolver.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: BIND: Denial of Service via malformed DNS64 responses",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Important: This denial of service vulnerability affects BIND resolvers configured to use the `dns64` feature. A specially crafted malformed DNS64 response from an authoritative server can cause the `named` process to unexpectedly terminate, leading to service unavailability. Exploitation requires the `dns64` feature to be explicitly enabled in the resolver\u0027s configuration.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-19666"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535477",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535477"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-19666",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-19666"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19666",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19666"
        },
        {
          "category": "external",
          "summary": "https://downloads.isc.org/isc/bind9/9.20.29",
          "url": "https://downloads.isc.org/isc/bind9/9.20.29"
        },
        {
          "category": "external",
          "summary": "https://downloads.isc.org/isc/bind9/9.21.26",
          "url": "https://downloads.isc.org/isc/bind9/9.21.26"
        },
        {
          "category": "external",
          "summary": "https://kb.isc.org/docs/cve-2026-19666",
          "url": "https://kb.isc.org/docs/cve-2026-19666"
        }
      ],
      "release_date": "2026-09-16T14:02:30.453000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, disable the `dns64` feature in the BIND resolver configuration if it is not required. This can be done by removing or commenting out the `dns64` configuration block in `named.conf` or related configuration files. After modifying the configuration, the BIND service (`named`) must be reloaded or restarted for the changes to take effect. This action may temporarily interrupt DNS resolution services.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: BIND: Denial of Service via malformed DNS64 responses"
    },
    {
      "cve": "CVE-2026-19667",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-09-16T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535435"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in `bind9`\u0027s `named` component. A remote attacker, by sending a specially crafted DNS negative answer of exactly 65536 bytes from an authoritative server, can cause a 16-bit length truncation. This results in a zero-byte negative cache entry. When `named` attempts to read this invalid entry, it will unexpectedly terminate, leading to a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in BIND 9\u0027s `named` service. An attacker-controlled authoritative server can trigger a `named` abort by sending a precisely sized negative DNS answer. This vulnerability primarily affects BIND instances configured as recursive resolvers that query untrusted authoritative servers, leading to service disruption.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-19667"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535435",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535435"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-19667",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-19667"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19667",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19667"
        },
        {
          "category": "external",
          "summary": "https://downloads.isc.org/isc/bind9/9.20.29",
          "url": "https://downloads.isc.org/isc/bind9/9.20.29"
        },
        {
          "category": "external",
          "summary": "https://downloads.isc.org/isc/bind9/9.21.26",
          "url": "https://downloads.isc.org/isc/bind9/9.21.26"
        },
        {
          "category": "external",
          "summary": "https://kb.isc.org/docs/cve-2026-19667",
          "url": "https://kb.isc.org/docs/cve-2026-19667"
        }
      ],
      "release_date": "2026-09-16T13:46:56.783000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        },
        {
          "category": "workaround",
          "details": "To reduce the exposure to this vulnerability, configure BIND 9 to forward all DNS queries to trusted, non-vulnerable upstream DNS servers. This prevents the local `named` instance from directly interacting with potentially malicious authoritative servers.\n\nExample configuration in `named.conf`:\n```\noptions {\n    forwarders { 192.0.2.1; 192.0.2.2; };\n    forward only;\n};\n```\nReplace `192.0.2.1` and `192.0.2.2` with the IP addresses of your trusted upstream DNS servers. After modifying the configuration, restart the `named` service for the changes to take effect. This configuration may impact DNS resolution if the configured forwarders are unavailable or do not provide comprehensive resolution.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind9: bind: BIND 9: Denial of Service via 16-bit length truncation in DNS negative cache handling"
    },
    {
      "cve": "CVE-2026-80274",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-09-16T14:31:05.646441+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535466"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BIND. A remote attacker, by sending a specially crafted DNSSEC-signed authoritative zone reply, can trigger an unexpected program exit in the validating resolver. This can lead to a Denial of Service (DoS) for the affected BIND resolver.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: BIND: Denial of Service via crafted DNSSEC reply",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in BIND resolvers. When DNSSEC validation is enabled, a specially crafted DNSSEC reply from an authoritative server can cause the BIND resolver to unexpectedly exit, leading to a disruption of DNS resolution services. This impacts the availability of DNS resolution on affected Red Hat systems configured with DNSSEC.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-80274"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535466",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535466"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-80274",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-80274"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-80274",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-80274"
        },
        {
          "category": "external",
          "summary": "https://downloads.isc.org/isc/bind9/9.20.29",
          "url": "https://downloads.isc.org/isc/bind9/9.20.29"
        },
        {
          "category": "external",
          "summary": "https://downloads.isc.org/isc/bind9/9.21.26",
          "url": "https://downloads.isc.org/isc/bind9/9.21.26"
        },
        {
          "category": "external",
          "summary": "https://kb.isc.org/docs/cve-2026-80274",
          "url": "https://kb.isc.org/docs/cve-2026-80274"
        }
      ],
      "release_date": "2026-09-16T14:07:20.058000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, disable DNSSEC validation in the BIND resolver configuration. This can be achieved by setting `dnssec-enable no;` and `dnssec-validation no;` within the `options` block in `named.conf` or an included configuration file. A restart of the `named` service is required for the changes to take effect and may impact DNS resolution during the restart. Disabling DNSSEC validation will reduce the security posture of DNS resolution by removing integrity protection for DNS data.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: BIND: Denial of Service via crafted DNSSEC reply"
    },
    {
      "cve": "CVE-2026-81563",
      "cwe": {
        "id": "CWE-772",
        "name": "Missing Release of Resource after Effective Lifetime"
      },
      "discovery_date": "2026-09-16T14:21:17.574382+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535461"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the BIND resolver. A remote attacker could exploit a vulnerability in the processing of SVCB/HTTPS AliasMode records that reference numerous ServiceMode records. This could lead to the resolver failing to properly release internal resources, causing resource exhaustion. Repeated exploitation would prevent the resolver from performing new recursive lookups, resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important denial of service vulnerability affects BIND resolvers, which are critical for DNS resolution in Red Hat environments. Repeated processing of specially crafted SVCB/HTTPS AliasMode records can exhaust internal resources, ultimately preventing the resolver from performing new recursive lookups and disrupting service availability.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-81563"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535461",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535461"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-81563",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-81563"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-81563",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81563"
        },
        {
          "category": "external",
          "summary": "https://downloads.isc.org/isc/bind9/9.20.29",
          "url": "https://downloads.isc.org/isc/bind9/9.20.29"
        },
        {
          "category": "external",
          "summary": "https://downloads.isc.org/isc/bind9/9.21.26",
          "url": "https://downloads.isc.org/isc/bind9/9.21.26"
        },
        {
          "category": "external",
          "summary": "https://kb.isc.org/docs/cve-2026-81563",
          "url": "https://kb.isc.org/docs/cve-2026-81563"
        }
      ],
      "release_date": "2026-09-16T14:00:04.129000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: BIND resolver: Denial of Service due to resource exhaustion in SVCB/HTTPS AliasMode processing"
    },
    {
      "cve": "CVE-2026-81736",
      "cwe": {
        "id": "CWE-606",
        "name": "Unchecked Input for Loop Condition"
      },
      "discovery_date": "2026-09-16T13:51:16.566536+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2535432"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BIND 9. A remote attacker can exploit this vulnerability by querying a BIND resolver for the root of a specially crafted, cached tree of SVCB/HTTPS AliasMode records. This action causes the resolver to spend a disproportionate amount of CPU time constructing the response, leading to a denial of service (DoS) condition. This can make the affected BIND 9 resolver unresponsive to legitimate requests.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service vulnerability in BIND 9 resolvers. An attacker can remotely trigger excessive CPU consumption by querying a resolver that has cached a specific tree of SVCB/HTTPS AliasMode records. This can lead to service disruption, particularly for resolvers exposed to untrusted networks.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-81736"
        },
        {
          "category": "external",
          "summary": "RHBZ#2535432",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2535432"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-81736",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-81736"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-81736",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-81736"
        },
        {
          "category": "external",
          "summary": "https://downloads.isc.org/isc/bind9/9.20.29",
          "url": "https://downloads.isc.org/isc/bind9/9.20.29"
        },
        {
          "category": "external",
          "summary": "https://downloads.isc.org/isc/bind9/9.21.26",
          "url": "https://downloads.isc.org/isc/bind9/9.21.26"
        },
        {
          "category": "external",
          "summary": "https://kb.isc.org/docs/cve-2026-81736",
          "url": "https://kb.isc.org/docs/cve-2026-81736"
        }
      ],
      "release_date": "2026-09-16T13:44:28.052000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        },
        {
          "category": "workaround",
          "details": "To mitigate the risk of this denial of service, configure BIND resolvers to restrict recursive queries to trusted clients only. This can be achieved by setting the `allow-recursion` option in the `named.conf` configuration file to specific IP addresses or networks. After modifying the configuration, the `named` service must be reloaded for the changes to take effect, which may temporarily interrupt DNS resolution.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: BIND 9: Remote Denial of Service via cached SVCB/HTTPS AliasMode records"
    },
    {
      "cve": "CVE-2026-94300",
      "cwe": {
        "id": "CWE-366",
        "name": "Race Condition within a Thread"
      },
      "discovery_date": "2026-10-20T19:46:35.830000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2556407"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BIND. This vulnerability may allow a remote attacker to achieve arbitrary code execution on the target server. An attacker who captures a valid User Datagram Protocol (UDP) message signed with Generic Security Service Transaction Signature (GSS-TSIG) can replay it while the negotiated key is active. When combined with crafted queries directed to an attacker-controlled DNS zone, this triggers memory corruption in the named service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security has rated this vulnerability as Important rather than Critical because, while remote unauthenticated code execution is possible, exploitation depends on capturing active cryptographic keys within their validity window and orchestrating complex concurrent requests. In standard Red Hat Enterprise Linux deployments, the BIND daemon does not enable GSS-TSIG by default, restricting risk primarily to servers integrated with Kerberos-based identity infrastructure like FreeIPA or Active Directory. Deployments that do not negotiate GSS-TSIG keys or that strictly limit dynamic DNS access to trusted networks remain unexposed to this attack vector.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-94300"
        },
        {
          "category": "external",
          "summary": "RHBZ#2556407",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556407"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-94300",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-94300"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-94300",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-94300"
        },
        {
          "category": "external",
          "summary": "https://kb.isc.org/docs/cve-2026-94300",
          "url": "https://kb.isc.org/docs/cve-2026-94300"
        }
      ],
      "release_date": "2026-10-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        },
        {
          "category": "workaround",
          "details": "Disable GSS-TSIG in the BIND configuration if Kerberos-authenticated dynamic DNS functionality is not required, or restrict network access to the DNS service using firewall controls.\n\nTo disable GSS-TSIG, comment out or remove the `tkey-gssapi-keytab` and `tkey-gssapi-credential` directives within `/etc/named.conf` (and any referenced include files), then restart the service:\n\nsystemctl restart named\n\nIf operating named inside a chroot environment, execute:\n\nsystemctl restart named-chroot\n\nAlternatively, restrict UDP and TCP traffic on port 53 to trusted network segments using host or network firewalls to block untrusted external access.\n\nCaveats: Disabling GSS-TSIG prevents clients from performing Kerberos-authenticated dynamic DNS modifications, which may disrupt environments relying on automated Active Directory or Identity Management (IdM) enrollment.\nWarning: Restarting the BIND service will momentarily interrupt active DNS query processing and domain name resolution for dependent network clients.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay"
    },
    {
      "cve": "CVE-2026-96888",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-10-19T18:50:52.794000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2556413"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BIND. A remote attacker can cause a Denial of Service (DoS) by sending requests that trigger an assertion failure, abruptly terminating the resolver daemon. This vulnerability occurs when the resolver is configured with both a redirect zone and strict query name minimization while processing redirected queries.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: bind: Denial of Service via assertion failure during redirect processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated as Important because an unauthenticated remote attacker can trigger a denial of service by causing the named daemon to crash without prior privileges. Exploitation is restricted to recursive resolvers where administrators have explicitly configured redirect zones alongside strict query name minimization. Standard Red Hat Enterprise Linux installations do not employ these non-default settings out of the box, significantly limiting exposure on typical systems.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-96888"
        },
        {
          "category": "external",
          "summary": "RHBZ#2556413",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556413"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-96888",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-96888"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-96888",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-96888"
        },
        {
          "category": "external",
          "summary": "https://kb.isc.org/docs/cve-2026-96888",
          "url": "https://kb.isc.org/docs/cve-2026-96888"
        }
      ],
      "release_date": "2026-10-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: bind: Denial of Service via assertion failure during redirect processing"
    },
    {
      "cve": "CVE-2026-97313",
      "cwe": {
        "id": "CWE-617",
        "name": "Reachable Assertion"
      },
      "discovery_date": "2026-10-20T19:57:36.315000+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2556415"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in BIND. A remote attacker can cause a denial of service (DoS) by sending a sequence of recursive and non-recursive queries to an affected server. When BIND is configured to handle recursive queries alongside multiple Response Policy Zones (RPZ) with differing recursion settings, processing these queries triggers an assertion failure. This failure causes the service to crash and terminate abruptly.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "bind: bind: Denial of service via assertion failure in RPZ query processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat rates this vulnerability as Important because an unauthenticated remote attacker can crash the BIND name service, causing a denial of service for all dependent infrastructure. Exploitation requires a specific, non-default deployment where recursive queries are permitted alongside multiple response policy zones configured with conflicting recursive-only options. Default Red Hat Enterprise Linux configurations do not define response policy zones and are therefore not exposed unless administrators have explicitly implemented this combination of policies.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
          "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
        ],
        "known_not_affected": [
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
          "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-97313"
        },
        {
          "category": "external",
          "summary": "RHBZ#2556415",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2556415"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-97313",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-97313"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-97313",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-97313"
        },
        {
          "category": "external",
          "summary": "https://kb.isc.org/docs/cve-2026-97313",
          "url": "https://kb.isc.org/docs/cve-2026-97313"
        }
      ],
      "release_date": "2026-10-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-11-03T03:58:39+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:94278"
        },
        {
          "category": "workaround",
          "details": "Ensure all Response Policy Zones (RPZ) configured in `/etc/named.conf` use identical `recursive-only` settings. For example, ensure all RPZ definitions consistently specify `recursive-only yes;` or `recursive-only no;`, eliminating conflicting policies.\n\nAlternatively, limit recursive query privileges strictly to authorized clients by configuring the `allow-recursion` option with an access control list (ACL).\n\nAfter modifying the configuration, validate the syntax and reload the service:\n\n```\nnamed-checkconf\nsystemctl reload named\n```\n\nCaveats:\nAligning the `recursive-only` setting across RPZ zones may alter policy enforcement behavior for non-recursive queries. Restricting recursion prevents unauthorized networks from performing recursive lookups.\n\nWarning:\nReloading or restarting the `named` service may cause a momentary pause in active DNS query processing.",
          "product_ids": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.src",
            "AppStream-9.6.0.Z.EUS:bind9.18-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-chroot-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-32:9.18.29-4.el9_6.5.x86_64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "AppStream-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-debugsource-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-devel-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-dnssec-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-doc-32:9.18.29-4.el9_6.5.noarch",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-libs-debuginfo-32:9.18.29-4.el9_6.5.x86_64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.aarch64",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.i686",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.ppc64le",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.s390x",
            "CRB-9.6.0.Z.EUS:bind9.18-utils-debuginfo-32:9.18.29-4.el9_6.5.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "bind: bind: Denial of service via assertion failure in RPZ query processing"
    }
  ]
}

CVE-2026-10723 (GCVE-0-2026-10723)

Vulnerability from cvelistv5 – Published: 2026-07-22 14:08 – Updated: 2026-07-22 18:47

Title

Incorrect acceptance of NSEC3 records

Summary

BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

Severity

6.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-22 18:47 UTC

CWE

CWE-347 - Improper Verification of Cryptographic Signature

Assigner

isc CNA under the mitre root

CNA scorecard A 95/100 over 33 records in the last 180 days details

References

3 references

URL	Tags
https://kb.isc.org/docs/cve-2026-10723	vendor-advisory
https://downloads.isc.org/isc/bind9/9.20.26	patch
https://downloads.isc.org/isc/bind9/9.21.24	patch

Impacted products

1 product

Vendor	Product	Version
ISC	BIND 9	Affected: 9.18.0 , ≤ 9.18.50 (custom) Affected: 9.20.0 , ≤ 9.20.24 (custom) Affected: 9.21.0 , ≤ 9.21.23 (custom) Affected: 9.11.3-S1 , ≤ 9.18.50-S1 (custom) Affected: 9.20.9-S1 , ≤ 9.20.24-S1 (custom) cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind::::::::

Date Public

2026-07-22 00:00

Credits

ISC would like to thank Qifan Zhang of Palo Alto Networks for bringing this vulnerability to our attention.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-10723",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T18:47:20.644848Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-22T18:47:43.659Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIND 9",
          "vendor": "ISC",
          "versions": [
            {
              "lessThanOrEqual": "9.18.50",
              "status": "affected",
              "version": "9.18.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.24",
              "status": "affected",
              "version": "9.20.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.21.23",
              "status": "affected",
              "version": "9.21.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.18.50-S1",
              "status": "affected",
              "version": "9.11.3-S1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.24-S1",
              "status": "affected",
              "version": "9.20.9-S1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50",
                  "versionStartIncluding": "9.18.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.24",
                  "versionStartIncluding": "9.20.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.21.23",
                  "versionStartIncluding": "9.21.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50-S1",
                  "versionStartIncluding": "9.11.3-S1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.24-S1",
                  "versionStartIncluding": "9.20.9-S1",
                  "vulnerable": true
                }
              ],
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ISC would like to thank Qifan Zhang of Palo Alto Networks for bringing this vulnerability to our attention."
        }
      ],
      "datePublic": "2026-07-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "We are not aware of any active exploits."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "An attacker may be able to forge NXDOMAIN responses for other sibling zones."
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "CWE-347 Improper Verification of Cryptographic Signature",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-22T14:08:19.609Z",
        "orgId": "404fd4d2-a609-4245-b543-2c944a302a22",
        "shortName": "isc"
      },
      "references": [
        {
          "name": "CVE-2026-10723",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://kb.isc.org/docs/cve-2026-10723"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.20.26"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.21.24"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to the patched release most closely related to your current version of BIND 9: 9.20.26, 9.21.24, or 9.20.26-S1."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Incorrect acceptance of NSEC3 records",
      "workarounds": [
        {
          "lang": "en",
          "value": "No workarounds known."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404fd4d2-a609-4245-b543-2c944a302a22",
    "assignerShortName": "isc",
    "cveId": "CVE-2026-10723",
    "datePublished": "2026-07-22T14:08:19.609Z",
    "dateReserved": "2026-06-03T07:56:36.024Z",
    "dateUpdated": "2026-07-22T18:47:43.659Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-11331 (GCVE-0-2026-11331)

Vulnerability from cvelistv5 – Published: 2026-07-22 14:10 – Updated: 2026-07-22 18:54

Title

Potential wildcard CNAME RPZ policy bypass

Summary

An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of the BIND 9 software. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-22 18:54 UTC

CWE

CWE-790 - Improper Filtering of Special Elements

Assigner

isc CNA under the mitre root

CNA scorecard A 95/100 over 33 records in the last 180 days details

References

3 references

URL	Tags
https://kb.isc.org/docs/cve-2026-11331	vendor-advisory
https://downloads.isc.org/isc/bind9/9.20.26	patch
https://downloads.isc.org/isc/bind9/9.21.24	patch

Impacted products

1 product

Vendor	Product	Version
ISC	BIND 9	Affected: 9.16.0 , ≤ 9.18.50 (custom) Affected: 9.20.0 , ≤ 9.20.24 (custom) Affected: 9.21.0 , ≤ 9.21.23 (custom) Affected: 9.16.8-S1 , ≤ 9.18.50-S1 (custom) Affected: 9.20.9-S1 , ≤ 9.20.24-S1 (custom) cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind::::::::

Date Public

2026-07-22 00:00

Credits

ISC would like to thank Laith Mash'al (0xmshal) for bringing this vulnerability to our attention.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-11331",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T18:54:08.280433Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-22T18:54:17.064Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIND 9",
          "vendor": "ISC",
          "versions": [
            {
              "lessThanOrEqual": "9.18.50",
              "status": "affected",
              "version": "9.16.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.24",
              "status": "affected",
              "version": "9.20.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.21.23",
              "status": "affected",
              "version": "9.21.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.18.50-S1",
              "status": "affected",
              "version": "9.16.8-S1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.24-S1",
              "status": "affected",
              "version": "9.20.9-S1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50",
                  "versionStartIncluding": "9.16.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.24",
                  "versionStartIncluding": "9.20.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.21.23",
                  "versionStartIncluding": "9.21.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50-S1",
                  "versionStartIncluding": "9.16.8-S1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.24-S1",
                  "versionStartIncluding": "9.20.9-S1",
                  "vulnerable": true
                }
              ],
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ISC would like to thank Laith Mash\u0027al (0xmshal) for bringing this vulnerability to our attention."
        }
      ],
      "datePublic": "2026-07-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of the BIND 9 software.\nThis issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "We are not aware of any active exploits."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "If such a situation is encountered, the targeted RPZ rule may be bypassed.  The condition could also lead to an unexpected exit."
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-790",
              "description": "CWE-790 Improper Filtering of Special Elements",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-22T14:10:44.763Z",
        "orgId": "404fd4d2-a609-4245-b543-2c944a302a22",
        "shortName": "isc"
      },
      "references": [
        {
          "name": "CVE-2026-11331",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://kb.isc.org/docs/cve-2026-11331"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.20.26"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.21.24"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to the patched release most closely related to your current version of BIND 9: 9.20.26, 9.21.24, or 9.20.26-S1."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Potential wildcard CNAME RPZ policy bypass",
      "workarounds": [
        {
          "lang": "en",
          "value": "No workarounds known."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404fd4d2-a609-4245-b543-2c944a302a22",
    "assignerShortName": "isc",
    "cveId": "CVE-2026-11331",
    "datePublished": "2026-07-22T14:10:44.763Z",
    "dateReserved": "2026-06-05T07:03:42.361Z",
    "dateUpdated": "2026-07-22T18:54:17.064Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-11622 (GCVE-0-2026-11622)

Vulnerability from cvelistv5 – Published: 2026-07-22 14:12 – Updated: 2026-07-22 18:53

Title

Potential memory usage beyond configured limits

Summary

A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-22 18:53 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

isc CNA under the mitre root

CNA scorecard A 95/100 over 33 records in the last 180 days details

References

3 references

URL	Tags
https://kb.isc.org/docs/cve-2026-11622	vendor-advisory
https://downloads.isc.org/isc/bind9/9.20.26	patch
https://downloads.isc.org/isc/bind9/9.21.24	patch

Impacted products

1 product

Vendor	Product	Version
ISC	BIND 9	Affected: 9.11.0 , ≤ 9.18.50 (custom) Affected: 9.20.0 , ≤ 9.20.24 (custom) Affected: 9.21.0 , ≤ 9.21.23 (custom) Affected: 9.11.3-S1 , ≤ 9.18.50-S1 (custom) Affected: 9.20.9-S1 , ≤ 9.20.24-S1 (custom) cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind::::::::

Date Public

2026-07-22 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-11622",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T18:53:04.346058Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-22T18:53:14.635Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIND 9",
          "vendor": "ISC",
          "versions": [
            {
              "lessThanOrEqual": "9.18.50",
              "status": "affected",
              "version": "9.11.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.24",
              "status": "affected",
              "version": "9.20.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.21.23",
              "status": "affected",
              "version": "9.21.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.18.50-S1",
              "status": "affected",
              "version": "9.11.3-S1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.24-S1",
              "status": "affected",
              "version": "9.20.9-S1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50",
                  "versionStartIncluding": "9.11.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.24",
                  "versionStartIncluding": "9.20.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.21.23",
                  "versionStartIncluding": "9.21.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50-S1",
                  "versionStartIncluding": "9.11.3-S1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.24-S1",
                  "versionStartIncluding": "9.20.9-S1",
                  "vulnerable": true
                }
              ],
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-07-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "This flaw was discovered in internal testing. We are not aware of any active exploits."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Memory usage may exceed configured limits, and response rate may be affected."
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-770",
              "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-22T14:12:19.564Z",
        "orgId": "404fd4d2-a609-4245-b543-2c944a302a22",
        "shortName": "isc"
      },
      "references": [
        {
          "name": "CVE-2026-11622",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://kb.isc.org/docs/cve-2026-11622"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.20.26"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.21.24"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to the patched release most closely related to your current version of BIND 9: 9.20.26, 9.21.24, or 9.20.26-S1."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Potential memory usage beyond configured limits",
      "workarounds": [
        {
          "lang": "en",
          "value": "No workarounds known."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404fd4d2-a609-4245-b543-2c944a302a22",
    "assignerShortName": "isc",
    "cveId": "CVE-2026-11622",
    "datePublished": "2026-07-22T14:12:19.564Z",
    "dateReserved": "2026-06-08T20:17:01.626Z",
    "dateUpdated": "2026-07-22T18:53:14.635Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-11721 (GCVE-0-2026-11721)

Vulnerability from cvelistv5 – Published: 2026-07-22 14:13 – Updated: 2026-07-22 18:52

Title

Cache poisoning possible with label count discrepancy, RRSIG, and wildcards

Summary

It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `named` to produce a wildcard name for a zone that is shorter than the attacker's zone, which can result in cache poisoning. For this attack to have any effect, the resolver under attack must have set `synth-from-dnssec yes;` (which is the default). This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-22 18:52 UTC

CWE

CWE-1284 - Improper Validation of Specified Quantity in Input

Assigner

isc CNA under the mitre root

CNA scorecard A 95/100 over 33 records in the last 180 days details

References

3 references

URL	Tags
https://kb.isc.org/docs/cve-2026-11721	vendor-advisory
https://downloads.isc.org/isc/bind9/9.20.26	patch
https://downloads.isc.org/isc/bind9/9.21.24	patch

Impacted products

1 product

Vendor	Product	Version
ISC	BIND 9	Affected: 9.11.0 , ≤ 9.18.50 (custom) Affected: 9.20.0 , ≤ 9.20.24 (custom) Affected: 9.21.0 , ≤ 9.21.23 (custom) Affected: 9.11.3-S1 , ≤ 9.18.50-S1 (custom) Affected: 9.20.9-S1 , ≤ 9.20.24-S1 (custom) cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind::::::::

Date Public

2026-07-22 00:00

Credits

ISC would like to thank Qifan Zhang of Palo Alto Networks for bringing this vulnerability to our attention.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-11721",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T18:52:35.390125Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-22T18:52:46.888Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIND 9",
          "vendor": "ISC",
          "versions": [
            {
              "lessThanOrEqual": "9.18.50",
              "status": "affected",
              "version": "9.11.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.24",
              "status": "affected",
              "version": "9.20.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.21.23",
              "status": "affected",
              "version": "9.21.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.18.50-S1",
              "status": "affected",
              "version": "9.11.3-S1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.24-S1",
              "status": "affected",
              "version": "9.20.9-S1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50",
                  "versionStartIncluding": "9.11.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.24",
                  "versionStartIncluding": "9.20.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.21.23",
                  "versionStartIncluding": "9.21.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50-S1",
                  "versionStartIncluding": "9.11.3-S1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.24-S1",
                  "versionStartIncluding": "9.20.9-S1",
                  "vulnerable": true
                }
              ],
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ISC would like to thank Qifan Zhang of Palo Alto Networks for bringing this vulnerability to our attention."
        }
      ],
      "datePublic": "2026-07-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "It is possible for an attacker\u0027s zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes `named` to produce a wildcard name for a zone that is shorter than the attacker\u0027s zone, which can result in cache poisoning. For this attack to have any effect, the resolver under attack must have set `synth-from-dnssec yes;` (which is the default).\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "We are not aware of any active exploits."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Potential cache poisoning."
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1284",
              "description": "CWE-1284 Improper Validation of Specified Quantity in Input",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-22T14:13:08.748Z",
        "orgId": "404fd4d2-a609-4245-b543-2c944a302a22",
        "shortName": "isc"
      },
      "references": [
        {
          "name": "CVE-2026-11721",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://kb.isc.org/docs/cve-2026-11721"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.20.26"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.21.24"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to the patched release most closely related to your current version of BIND 9: 9.20.26, 9.21.24, or 9.20.26-S1."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Cache poisoning possible with label count discrepancy, RRSIG, and wildcards",
      "workarounds": [
        {
          "lang": "en",
          "value": "No workarounds known."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404fd4d2-a609-4245-b543-2c944a302a22",
    "assignerShortName": "isc",
    "cveId": "CVE-2026-11721",
    "datePublished": "2026-07-22T14:13:08.748Z",
    "dateReserved": "2026-06-09T01:19:47.697Z",
    "dateUpdated": "2026-07-22T18:52:46.888Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-13204 (GCVE-0-2026-13204)

Vulnerability from cvelistv5 – Published: 2026-07-22 14:15 – Updated: 2026-07-22 18:52

Title

Unexpected exit in certain situations with NSEC and NSEC3 both present

Summary

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-22 18:51 UTC

CWE

CWE-617 - Reachable Assertion

Assigner

isc CNA under the mitre root

CNA scorecard A 95/100 over 33 records in the last 180 days details

References

3 references

URL	Tags
https://kb.isc.org/docs/cve-2026-13204	vendor-advisory
https://downloads.isc.org/isc/bind9/9.20.26	patch
https://downloads.isc.org/isc/bind9/9.21.24	patch

Impacted products

1 product

Vendor	Product	Version
ISC	BIND 9	Affected: 9.11.0 , ≤ 9.18.50 (custom) Affected: 9.20.0 , ≤ 9.20.24 (custom) Affected: 9.21.0 , ≤ 9.21.23 (custom) Affected: 9.11.3-S1 , ≤ 9.18.50-S1 (custom) Affected: 9.20.9-S1 , ≤ 9.20.24-S1 (custom) cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind::::::::

Date Public

2026-07-22 00:00

Credits

ISC would like to thank Qifan Zhang of Palo Alto Networks for bringing this vulnerability to our attention.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-13204",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T18:51:59.528740Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-22T18:52:12.584Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIND 9",
          "vendor": "ISC",
          "versions": [
            {
              "lessThanOrEqual": "9.18.50",
              "status": "affected",
              "version": "9.11.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.24",
              "status": "affected",
              "version": "9.20.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.21.23",
              "status": "affected",
              "version": "9.21.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.18.50-S1",
              "status": "affected",
              "version": "9.11.3-S1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.24-S1",
              "status": "affected",
              "version": "9.20.9-S1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50",
                  "versionStartIncluding": "9.11.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.24",
                  "versionStartIncluding": "9.20.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.21.23",
                  "versionStartIncluding": "9.21.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50-S1",
                  "versionStartIncluding": "9.11.3-S1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.24-S1",
                  "versionStartIncluding": "9.20.9-S1",
                  "vulnerable": true
                }
              ],
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ISC would like to thank Qifan Zhang of Palo Alto Networks for bringing this vulnerability to our attention."
        }
      ],
      "datePublic": "2026-07-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "We are not aware of any active exploits."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "BIND may exit unexpectedly resulting in a DoS while validating such a domain."
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-617",
              "description": "CWE-617 Reachable Assertion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-22T14:15:30.557Z",
        "orgId": "404fd4d2-a609-4245-b543-2c944a302a22",
        "shortName": "isc"
      },
      "references": [
        {
          "name": "CVE-2026-13204",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://kb.isc.org/docs/cve-2026-13204"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.20.26"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.21.24"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to the patched release most closely related to your current version of BIND 9: 9.20.26, 9.21.24, or 9.20.26-S1."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Unexpected exit in certain situations with NSEC and NSEC3 both present",
      "workarounds": [
        {
          "lang": "en",
          "value": "No workarounds known."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404fd4d2-a609-4245-b543-2c944a302a22",
    "assignerShortName": "isc",
    "cveId": "CVE-2026-13204",
    "datePublished": "2026-07-22T14:15:30.557Z",
    "dateReserved": "2026-06-24T14:12:52.934Z",
    "dateUpdated": "2026-07-22T18:52:12.584Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-13321 (GCVE-0-2026-13321)

Vulnerability from cvelistv5 – Published: 2026-07-22 14:16 – Updated: 2026-07-22 18:51

Title

DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field

Summary

The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

Severity

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-22 18:51 UTC

CWE

CWE-346 - Origin Validation Error

Assigner

isc CNA under the mitre root

CNA scorecard A 95/100 over 33 records in the last 180 days details

References

3 references

URL	Tags
https://kb.isc.org/docs/cve-2026-13321	vendor-advisory
https://downloads.isc.org/isc/bind9/9.20.26	patch
https://downloads.isc.org/isc/bind9/9.21.24	patch

Impacted products

1 product

Vendor	Product	Version
ISC	BIND 9	Affected: 9.11.0 , ≤ 9.18.50 (custom) Affected: 9.20.0 , ≤ 9.20.24 (custom) Affected: 9.21.0 , ≤ 9.21.23 (custom) Affected: 9.11.3-S1 , ≤ 9.18.50-S1 (custom) Affected: 9.20.9-S1 , ≤ 9.20.24-S1 (custom) cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind::::::::

Date Public

2026-07-22 00:00

Credits

ISC would like to thank Qifan Zhang of Palo Alto Networks for bringing this vulnerability to our attention.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-13321",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-22T18:51:32.344539Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-22T18:51:47.414Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIND 9",
          "vendor": "ISC",
          "versions": [
            {
              "lessThanOrEqual": "9.18.50",
              "status": "affected",
              "version": "9.11.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.24",
              "status": "affected",
              "version": "9.20.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.21.23",
              "status": "affected",
              "version": "9.21.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.18.50-S1",
              "status": "affected",
              "version": "9.11.3-S1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.24-S1",
              "status": "affected",
              "version": "9.20.9-S1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50",
                  "versionStartIncluding": "9.11.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.24",
                  "versionStartIncluding": "9.20.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.21.23",
                  "versionStartIncluding": "9.21.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50-S1",
                  "versionStartIncluding": "9.11.3-S1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.24-S1",
                  "versionStartIncluding": "9.20.9-S1",
                  "vulnerable": true
                }
              ],
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ISC would like to thank Qifan Zhang of Palo Alto Networks for bringing this vulnerability to our attention."
        }
      ],
      "datePublic": "2026-07-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The BIND resolver accepts validly-signed NSEC records where the \"Next Domain Name\" field points outside the signer\u0027s zone.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "We are not aware of any active exploits."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "An attacker controlling any DNSSEC-signed zone can craft NSEC records that span into victim zones, enabling cross-zone cache poisoning with authenticated denial-of-service responses (AD=1)."
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-346",
              "description": "CWE-346 Origin Validation Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-22T14:16:10.450Z",
        "orgId": "404fd4d2-a609-4245-b543-2c944a302a22",
        "shortName": "isc"
      },
      "references": [
        {
          "name": "CVE-2026-13321",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://kb.isc.org/docs/cve-2026-13321"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.20.26"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.21.24"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to the patched release most closely related to your current version of BIND 9: 9.20.26, 9.21.24, or 9.20.26-S1."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field",
      "workarounds": [
        {
          "lang": "en",
          "value": "No workarounds known."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404fd4d2-a609-4245-b543-2c944a302a22",
    "assignerShortName": "isc",
    "cveId": "CVE-2026-13321",
    "datePublished": "2026-07-22T14:16:10.450Z",
    "dateReserved": "2026-06-25T08:45:35.931Z",
    "dateUpdated": "2026-07-22T18:51:47.414Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-19630 (GCVE-0-2026-19630)

Vulnerability from cvelistv5 – Published: 2026-10-21 12:41 – Updated: 2026-10-21 17:19

Title

Amplified resource exhaustion in inbound message processing

Summary

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during processing. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-21 15:19 UTC

CWE

CWE-407 - Inefficient Algorithmic Complexity

Assigner

isc CNA under the mitre root

CNA scorecard A 95/100 over 33 records in the last 180 days details

References

3 references

URL	Tags
https://kb.isc.org/docs/cve-2026-19630	vendor-advisory
https://downloads.isc.org/isc/bind9/9.20.30	patch
https://downloads.isc.org/isc/bind9/9.21.27	patch

Impacted products

1 product

Vendor	Product	Version
ISC	BIND 9	Affected: 9.11.0 , ≤ 9.18.50 (custom) Affected: 9.20.0 , ≤ 9.20.29 (custom) Affected: 9.21.0 , ≤ 9.21.26 (custom) Affected: 9.11.3-S1 , ≤ 9.18.50-S1 (custom) Affected: 9.20.9-S1 , ≤ 9.20.29-S1 (custom) cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind::::::::

Date Public

2026-10-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-19630",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-21T15:19:21.749441Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-21T17:19:14.434Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIND 9",
          "vendor": "ISC",
          "versions": [
            {
              "lessThanOrEqual": "9.18.50",
              "status": "affected",
              "version": "9.11.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.29",
              "status": "affected",
              "version": "9.20.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.21.26",
              "status": "affected",
              "version": "9.21.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.18.50-S1",
              "status": "affected",
              "version": "9.11.3-S1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.29-S1",
              "status": "affected",
              "version": "9.20.9-S1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50",
                  "versionStartIncluding": "9.11.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.29",
                  "versionStartIncluding": "9.20.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.21.26",
                  "versionStartIncluding": "9.21.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50-S1",
                  "versionStartIncluding": "9.11.3-S1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.29-S1",
                  "versionStartIncluding": "9.20.9-S1",
                  "vulnerable": true
                }
              ],
              "operator": "OR"
            }
          ]
        }
      ],
      "datePublic": "2026-10-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND.  A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during processing.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "This flaw was discovered in internal testing. We are not aware of any active exploits."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Potential CPU and/or memory exhaustion leading to denial-of-service."
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-407",
              "description": "CWE-407 Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-21T12:41:04.379Z",
        "orgId": "404fd4d2-a609-4245-b543-2c944a302a22",
        "shortName": "isc"
      },
      "references": [
        {
          "name": "CVE-2026-19630",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://kb.isc.org/docs/cve-2026-19630"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.20.30"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.21.27"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to the patched release most closely related to your current version of BIND 9: 9.20.30, 9.21.27, or 9.20.30-S1."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "title": "Amplified resource exhaustion in inbound message processing",
      "workarounds": [
        {
          "lang": "en",
          "value": "No workarounds known."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404fd4d2-a609-4245-b543-2c944a302a22",
    "assignerShortName": "isc",
    "cveId": "CVE-2026-19630",
    "datePublished": "2026-10-21T12:41:04.379Z",
    "dateReserved": "2026-08-12T15:49:27.570Z",
    "dateUpdated": "2026-10-21T17:19:14.434Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-19666 (GCVE-0-2026-19666)

Vulnerability from cvelistv5 – Published: 2026-09-16 14:02 – Updated: 2026-09-17 17:38

Title

Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path

Summary

On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is malformed in a specific way, the resolver `named` process will exit unexpectedly. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-17 17:38 UTC

CWE

CWE-416 - Use After Free

Assigner

isc CNA under the mitre root

CNA scorecard A 95/100 over 33 records in the last 180 days details

References

3 references

URL	Tags
https://kb.isc.org/docs/cve-2026-19666	vendor-advisory
https://downloads.isc.org/isc/bind9/9.20.29	patch
https://downloads.isc.org/isc/bind9/9.21.26	patch

Impacted products

1 product

Vendor	Product	Version
ISC	BIND 9	Affected: 9.11.0 , ≤ 9.18.50 (custom) Affected: 9.20.0 , ≤ 9.20.27 (custom) Affected: 9.21.0 , ≤ 9.21.25 (custom) Affected: 9.11.3-S1 , ≤ 9.18.50-S1 (custom) Affected: 9.20.9-S1 , ≤ 9.20.27-S1 (custom) cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind::::::::

Date Public

2026-09-16 00:00

Credits

ISC would like to thank Rintaro Kawasugi for bringing this vulnerability to our attention.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-19666",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-17T17:38:34.886541Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T17:38:45.420Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIND 9",
          "vendor": "ISC",
          "versions": [
            {
              "lessThanOrEqual": "9.18.50",
              "status": "affected",
              "version": "9.11.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.27",
              "status": "affected",
              "version": "9.20.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.21.25",
              "status": "affected",
              "version": "9.21.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.18.50-S1",
              "status": "affected",
              "version": "9.11.3-S1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.27-S1",
              "status": "affected",
              "version": "9.20.9-S1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50",
                  "versionStartIncluding": "9.11.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.27",
                  "versionStartIncluding": "9.20.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.21.25",
                  "versionStartIncluding": "9.21.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50-S1",
                  "versionStartIncluding": "9.11.3-S1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.27-S1",
                  "versionStartIncluding": "9.20.9-S1",
                  "vulnerable": true
                }
              ],
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ISC would like to thank Rintaro Kawasugi for bringing this vulnerability to our attention."
        }
      ],
      "datePublic": "2026-09-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "On a resolver configured to use ``dns64``, if an applicable answer from the authoritative server is malformed in a specific way, the resolver `named` process will exit unexpectedly.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "We are not aware of any active exploits."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "An attacker may be able to cause `named` to exit unexpectedly resulting in a denial-of-service."
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-16T14:02:30.453Z",
        "orgId": "404fd4d2-a609-4245-b543-2c944a302a22",
        "shortName": "isc"
      },
      "references": [
        {
          "name": "CVE-2026-19666",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://kb.isc.org/docs/cve-2026-19666"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.20.29"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.21.26"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to the patched release most closely related to your current version of BIND 9: 9.20.29, 9.21.26, or 9.20.29-S1."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path",
      "workarounds": [
        {
          "lang": "en",
          "value": "No workarounds known."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404fd4d2-a609-4245-b543-2c944a302a22",
    "assignerShortName": "isc",
    "cveId": "CVE-2026-19666",
    "datePublished": "2026-09-16T14:02:30.453Z",
    "dateReserved": "2026-08-12T20:26:23.829Z",
    "dateUpdated": "2026-09-17T17:38:45.420Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-19667 (GCVE-0-2026-19667)

Vulnerability from cvelistv5 – Published: 2026-09-16 13:46 – Updated: 2026-09-17 18:45

Title

Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`

Summary

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-17 18:45 UTC

CWE

CWE-197 - Numeric Truncation Error

Assigner

isc CNA under the mitre root

CNA scorecard A 95/100 over 33 records in the last 180 days details

References

3 references

URL	Tags
https://kb.isc.org/docs/cve-2026-19667	vendor-advisory
https://downloads.isc.org/isc/bind9/9.20.29	patch
https://downloads.isc.org/isc/bind9/9.21.26	patch

Impacted products

1 product

Vendor	Product	Version
ISC	BIND 9	Affected: 9.11.0 , ≤ 9.18.50 (custom) Affected: 9.20.0 , ≤ 9.20.27 (custom) Affected: 9.21.0 , ≤ 9.21.25 (custom) Affected: 9.11.3-S1 , ≤ 9.18.50-S1 (custom) Affected: 9.20.9-S1 , ≤ 9.20.27-S1 (custom) cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind::::::::

Date Public

2026-09-16 00:00

Credits

ISC would like to thank Rintaro Kawasugi for bringing this vulnerability to our attention.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-19667",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-17T18:45:26.324502Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T18:45:36.926Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIND 9",
          "vendor": "ISC",
          "versions": [
            {
              "lessThanOrEqual": "9.18.50",
              "status": "affected",
              "version": "9.11.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.27",
              "status": "affected",
              "version": "9.20.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.21.25",
              "status": "affected",
              "version": "9.21.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.18.50-S1",
              "status": "affected",
              "version": "9.11.3-S1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.27-S1",
              "status": "affected",
              "version": "9.20.9-S1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50",
                  "versionStartIncluding": "9.11.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.27",
                  "versionStartIncluding": "9.20.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.21.25",
                  "versionStartIncluding": "9.21.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.50-S1",
                  "versionStartIncluding": "9.11.3-S1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.27-S1",
                  "versionStartIncluding": "9.20.9-S1",
                  "vulnerable": true
                }
              ],
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ISC would like to thank Rintaro Kawasugi for bringing this vulnerability to our attention."
        }
      ],
      "datePublic": "2026-09-16T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "We are not aware of any active exploits."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "A successful attack results in unexpected program exit and a denial-of-service attack."
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-197",
              "description": "CWE-197 Numeric Truncation Error",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-16T13:46:56.783Z",
        "orgId": "404fd4d2-a609-4245-b543-2c944a302a22",
        "shortName": "isc"
      },
      "references": [
        {
          "name": "CVE-2026-19667",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://kb.isc.org/docs/cve-2026-19667"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.20.29"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.21.26"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to the patched release most closely related to your current version of BIND 9: 9.20.29, 9.21.26, or 9.20.29-S1."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`",
      "workarounds": [
        {
          "lang": "en",
          "value": "No workarounds known."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404fd4d2-a609-4245-b543-2c944a302a22",
    "assignerShortName": "isc",
    "cveId": "CVE-2026-19667",
    "datePublished": "2026-09-16T13:46:56.783Z",
    "dateReserved": "2026-08-12T20:29:23.400Z",
    "dateUpdated": "2026-09-17T18:45:36.926Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-3039 (GCVE-0-2026-3039)

Vulnerability from cvelistv5 – Published: 2026-05-20 13:09 – Updated: 2026-09-17 12:04

Title

BIND 9 server memory exhaustion during GSS-API TKEY negotiation

Summary

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-20 13:42 UTC

CWE

CWE-771 - Missing Reference to Active Allocated Resource
CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

isc CNA under the mitre root

CNA scorecard A 95/100 over 33 records in the last 180 days details

References

18 references

URL	Tags
https://kb.isc.org/docs/cve-2026-3039	vendor-advisory
https://downloads.isc.org/isc/bind9/9.18.49	patch
https://downloads.isc.org/isc/bind9/9.20.23	patch
https://downloads.isc.org/isc/bind9/9.21.22	patch
https://access.redhat.com/security/cve/CVE-2026-3039	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2479767	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:60383	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62549	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65851	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24338	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24339	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23360	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57189	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55441	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24367	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24368	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20334	vendor-advisoryx_refsource_REDHAT

Impacted products

14 products

Vendor	Product	Version
ISC	BIND 9	Affected: 9.0.0 , ≤ 9.16.50 (custom) Affected: 9.18.0 , ≤ 9.18.48 (custom) Affected: 9.20.0 , ≤ 9.20.22 (custom) Affected: 9.21.0 , ≤ 9.21.21 (custom) Affected: 9.9.3-S1 , ≤ 9.16.50-S1 (custom) Affected: 9.18.11-S1 , ≤ 9.18.48-S1 (custom) Affected: 9.20.9-S1 , ≤ 9.20.22-S1 (custom) cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind::::::::
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 32:9.18.33-15.el10_2.2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 32:9.11.4-26.P2.el7_9.21 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 32:9.16.23-0.22.el8_10.6 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 32:9.11.36-16.el8_10.8 , < * (rpm) cpe:/a:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 32:9.16.23-40.el9_8.2 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 32:9.18.29-14.el9_8.2 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 32:9.16.23-18.el9_4.12 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 32:9.16.23-31.el9_6.4 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 416.94.202609011112-0 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat Hardened Images	Unaffected: 9.18.49-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4

Date Public

2026-05-20 00:00

Credits

ISC would like to thank Vitaly Simonovich for bringing this vulnerability to our attention.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-3039",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-20T13:42:49.621351Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-20T13:43:00.275Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "bind",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.18.33-15.el10_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "bind",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.11.4-26.P2.el7_9.21",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "bind9.16",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.16.23-0.22.el8_10.6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8",
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "bind",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.11.36-16.el8_10.8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "bind",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.16.23-40.el9_8.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "bind9.18",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.18.29-14.el9_8.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "bind",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.16.23-18.el9_4.12",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "bind",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.16.23-31.el9_6.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "416.94.202609011112-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "bind-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9.18.49-1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "affected",
            "packageName": "bind",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "dhcp",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift/ose-rhel-coreos-8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-21T12:24:11.051Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending maliciously-constructed packets to BIND servers configured for TKEY-based authentication via GSS-API (Generic Security Service Application Program Interface) tokens. This can lead to excessive memory consumption, resulting in a Denial of Service (DoS) for the affected server."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-17T12:04:38.684Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-3039"
          },
          {
            "name": "RHBZ#2479767",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479767"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3039.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60383"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62549"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:65851"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24338"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24339"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23360"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57189"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55441"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24367"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24368"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20334"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:60383: Red Hat Enterprise Linux Server (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62549: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:65851: Red Hat OpenShift Container Platform 4.18"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24338: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24339: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux BaseOS (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23360: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57189: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55441: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24367: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24368: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20334: Red Hat Hardened Images"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-19T09:48:19.212Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-21T12:24:11.051Z",
            "value": "Made public."
          }
        ],
        "title": "bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.\n\nExample:\n```bash\n# Edit /etc/named.conf and remove or comment out lines related to tkey-gssapi-keytab or tkey-gssapi-credential.\n# For example, remove or comment out:\n# key \"gssapi-key\" {\n#     algorithm GSSAPI;\n#     secret \"BASE64_ENCODED_KEY\";\n# };\n#\n# Then reload the named service:\nsystemctl reload named\n```\nReloading the `named` service may cause a brief interruption in DNS resolution."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIND 9",
          "vendor": "ISC",
          "versions": [
            {
              "lessThanOrEqual": "9.16.50",
              "status": "affected",
              "version": "9.0.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.18.48",
              "status": "affected",
              "version": "9.18.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.22",
              "status": "affected",
              "version": "9.20.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.21.21",
              "status": "affected",
              "version": "9.21.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.16.50-S1",
              "status": "affected",
              "version": "9.9.3-S1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.18.48-S1",
              "status": "affected",
              "version": "9.18.11-S1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.22-S1",
              "status": "affected",
              "version": "9.20.9-S1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.16.50",
                  "versionStartIncluding": "9.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.48",
                  "versionStartIncluding": "9.18.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.22",
                  "versionStartIncluding": "9.20.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.21.21",
                  "versionStartIncluding": "9.21.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.16.50-S1",
                  "versionStartIncluding": "9.9.3-S1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.48-S1",
                  "versionStartIncluding": "9.18.11-S1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.22-S1",
                  "versionStartIncluding": "9.20.9-S1",
                  "vulnerable": true
                }
              ],
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ISC would like to thank Vitaly Simonovich for bringing this vulnerability to our attention."
        }
      ],
      "datePublic": "2026-05-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets.  Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments.\nThis issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "We are not aware of any active exploits."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "An attacker can construct and send packets to a BIND server that will cause it to allocate memory that is not subsequently released.  Depending on the volume and frequency of the packets received, named will eventually fail due to memory exhaustion."
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-771",
              "description": "CWE-771 Missing Reference to Active Allocated Resource",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-20T13:09:04.126Z",
        "orgId": "404fd4d2-a609-4245-b543-2c944a302a22",
        "shortName": "isc"
      },
      "references": [
        {
          "name": "CVE-2026-3039",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://kb.isc.org/docs/cve-2026-3039"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.18.49"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.20.23"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.21.22"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to the patched release most closely related to your current version of BIND 9: 9.18.49, 9.20.23, 9.21.22, 9.18.49-S1, or 9.20.23-S1."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "BIND 9 server memory exhaustion during GSS-API TKEY negotiation",
      "workarounds": [
        {
          "lang": "en",
          "value": "No workarounds known."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404fd4d2-a609-4245-b543-2c944a302a22",
    "assignerShortName": "isc",
    "cveId": "CVE-2026-3039",
    "datePublished": "2026-05-20T13:09:04.126Z",
    "dateReserved": "2026-02-23T16:28:45.411Z",
    "dateUpdated": "2026-09-17T12:04:38.684Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

How durations are calculated

Following the VTEM framework (Black Hat USA 2015), time to patch starts when the vendor or a coordinator was informed, total time to patch at discovery, and disclosure to patch at public disclosure; vendor response time runs from the report to its acknowledgement. Time to exploit and time unpatched start at the earliest discovery or report, falling back to public disclosure. Unpatched time ends at the first recorded patch, or the calculation time when no patch is recorded. Exploitation to patch shows the interval between those two events; a published proof of concept is a public exploit, not exploitation.

Each result shows its source dates. A negative interval means the end event came first; when date-only inputs leave the order open, the result says so. Date-only inputs are approximate. The earliest evidence wins: KEV report dates and sightings are labelled as such. Records describing another vulnerability are listed but never calculated from, and a PoC alone does not establish exploitation. Missing patch evidence does not prove that no patch exists. Filters below change the event list only.

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:94278

CVE-2026-10723 (GCVE-0-2026-10723)

CVE-2026-11331 (GCVE-0-2026-11331)

CVE-2026-11622 (GCVE-0-2026-11622)

CVE-2026-11721 (GCVE-0-2026-11721)

CVE-2026-13204 (GCVE-0-2026-13204)

CVE-2026-13321 (GCVE-0-2026-13321)

CVE-2026-19630 (GCVE-0-2026-19630)

CVE-2026-19666 (GCVE-0-2026-19666)

CVE-2026-19667 (GCVE-0-2026-19667)

CVE-2026-3039 (GCVE-0-2026-3039)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour