Vulnerability-Lookup

ubuntu-cve-2026-5946

Vulnerability from osv_ubuntu

Published

2026-05-20 00:00

Modified

2026-08-27 01:11

Summary

Details

Multiple flaws have been identified in named related to the handling of DNS messages whose CLASS is not Internet (IN) — for example, CHAOS or HESIOD, or DNS messages that specify meta-classes (ANY or NONE) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (UPDATE), zone change notifications (NOTIFY), or processing of IN-specific record types in non-IN data — can cause assertion failures in named. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Severity

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.5 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-5946	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-5946	REPORT
	https://kb.isc.org/docs/cve-2026-5946	REPORT
	https://ubuntu.com/security/notices/USN-8293-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8682-1	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libbind9-160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libdns-export1100",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libdns1100",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libirs-export160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libirs160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libisc-export169",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libisc169",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libisccc-export160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libisccc160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libisccfg-export160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libisccfg160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "liblwres160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.11.3+dfsg-1ubuntu1.19+esm5?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.10.3.dfsg.P4-12.6ubuntu1",
        "1:9.11.2.P1-1ubuntu2",
        "1:9.11.2.P1-1ubuntu3",
        "1:9.11.2.P1-1ubuntu4",
        "1:9.11.2.P1-1ubuntu5",
        "1:9.11.3+dfsg-1ubuntu1",
        "1:9.11.3+dfsg-1ubuntu1.1",
        "1:9.11.3+dfsg-1ubuntu1.2",
        "1:9.11.3+dfsg-1ubuntu1.3",
        "1:9.11.3+dfsg-1ubuntu1.5",
        "1:9.11.3+dfsg-1ubuntu1.7",
        "1:9.11.3+dfsg-1ubuntu1.8",
        "1:9.11.3+dfsg-1ubuntu1.9",
        "1:9.11.3+dfsg-1ubuntu1.10",
        "1:9.11.3+dfsg-1ubuntu1.11",
        "1:9.11.3+dfsg-1ubuntu1.12",
        "1:9.11.3+dfsg-1ubuntu1.13",
        "1:9.11.3+dfsg-1ubuntu1.14",
        "1:9.11.3+dfsg-1ubuntu1.15",
        "1:9.11.3+dfsg-1ubuntu1.16",
        "1:9.11.3+dfsg-1ubuntu1.17",
        "1:9.11.3+dfsg-1ubuntu1.18",
        "1:9.11.3+dfsg-1ubuntu1.19+esm1",
        "1:9.11.3+dfsg-1ubuntu1.19+esm2",
        "1:9.11.3+dfsg-1ubuntu1.19+esm3",
        "1:9.11.3+dfsg-1ubuntu1.19+esm4"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.18.30-0ubuntu0.20.04.2+esm2"
          },
          {
            "binary_name": "bind9-dnsutils",
            "binary_version": "1:9.18.30-0ubuntu0.20.04.2+esm2"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.18.30-0ubuntu0.20.04.2+esm2"
          },
          {
            "binary_name": "bind9-libs",
            "binary_version": "1:9.18.30-0ubuntu0.20.04.2+esm2"
          },
          {
            "binary_name": "bind9-utils",
            "binary_version": "1:9.18.30-0ubuntu0.20.04.2+esm2"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.18.30-0ubuntu0.20.04.2+esm2"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.18.30-0ubuntu0.20.04.2+esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.18.30-0ubuntu0.20.04.2+esm2?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.18.30-0ubuntu0.20.04.2+esm2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.11.5.P4+dfsg-5.1ubuntu2",
        "1:9.11.5.P4+dfsg-5.1ubuntu3",
        "1:9.11.5.P4+dfsg-5.1ubuntu4",
        "1:9.11.5.P4+dfsg-5.1ubuntu5",
        "1:9.11.14+dfsg-1ubuntu1",
        "1:9.11.14+dfsg-3ubuntu1",
        "1:9.16.0-1ubuntu3",
        "1:9.16.0-1ubuntu4",
        "1:9.16.0-1ubuntu5",
        "1:9.16.1-0ubuntu1",
        "1:9.16.1-0ubuntu2",
        "1:9.16.1-0ubuntu2.1",
        "1:9.16.1-0ubuntu2.2",
        "1:9.16.1-0ubuntu2.3",
        "1:9.16.1-0ubuntu2.4",
        "1:9.16.1-0ubuntu2.6",
        "1:9.16.1-0ubuntu2.7",
        "1:9.16.1-0ubuntu2.8",
        "1:9.16.1-0ubuntu2.9",
        "1:9.16.1-0ubuntu2.10",
        "1:9.16.1-0ubuntu2.11",
        "1:9.16.1-0ubuntu2.12",
        "1:9.16.1-0ubuntu2.14",
        "1:9.16.1-0ubuntu2.15",
        "1:9.16.1-0ubuntu2.16",
        "1:9.16.48-0ubuntu0.20.04.1",
        "1:9.18.28-0ubuntu0.20.04.1",
        "1:9.18.30-0ubuntu0.20.04.1",
        "1:9.18.30-0ubuntu0.20.04.2",
        "1:9.18.30-0ubuntu0.20.04.2+esm1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libbind9-161",
            "binary_version": "1:9.11.16+dfsg-3~ubuntu1"
          },
          {
            "binary_name": "libdns-export1109",
            "binary_version": "1:9.11.16+dfsg-3~ubuntu1"
          },
          {
            "binary_name": "libdns1109",
            "binary_version": "1:9.11.16+dfsg-3~ubuntu1"
          },
          {
            "binary_name": "libirs-export161",
            "binary_version": "1:9.11.16+dfsg-3~ubuntu1"
          },
          {
            "binary_name": "libirs161",
            "binary_version": "1:9.11.16+dfsg-3~ubuntu1"
          },
          {
            "binary_name": "libisc-export1105",
            "binary_version": "1:9.11.16+dfsg-3~ubuntu1"
          },
          {
            "binary_name": "libisc1105",
            "binary_version": "1:9.11.16+dfsg-3~ubuntu1"
          },
          {
            "binary_name": "libisccc-export161",
            "binary_version": "1:9.11.16+dfsg-3~ubuntu1"
          },
          {
            "binary_name": "libisccc161",
            "binary_version": "1:9.11.16+dfsg-3~ubuntu1"
          },
          {
            "binary_name": "libisccfg-export163",
            "binary_version": "1:9.11.16+dfsg-3~ubuntu1"
          },
          {
            "binary_name": "libisccfg163",
            "binary_version": "1:9.11.16+dfsg-3~ubuntu1"
          },
          {
            "binary_name": "liblwres161",
            "binary_version": "1:9.11.16+dfsg-3~ubuntu1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "bind9-libs",
        "purl": "pkg:deb/ubuntu/bind9-libs@1:9.11.16+dfsg-3~ubuntu1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.11.16+dfsg-3~build1",
        "1:9.11.16+dfsg-3~ubuntu1"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.18.39-0ubuntu0.22.04.4"
          },
          {
            "binary_name": "bind9-dnsutils",
            "binary_version": "1:9.18.39-0ubuntu0.22.04.4"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.18.39-0ubuntu0.22.04.4"
          },
          {
            "binary_name": "bind9-libs",
            "binary_version": "1:9.18.39-0ubuntu0.22.04.4"
          },
          {
            "binary_name": "bind9-utils",
            "binary_version": "1:9.18.39-0ubuntu0.22.04.4"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.18.39-0ubuntu0.22.04.4"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.18.39-0ubuntu0.22.04.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.18.39-0ubuntu0.22.04.4?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.18.39-0ubuntu0.22.04.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.16.15-1ubuntu1",
        "1:9.16.15-1ubuntu2",
        "1:9.16.15-1ubuntu3",
        "1:9.18.0-2ubuntu1",
        "1:9.18.0-2ubuntu2",
        "1:9.18.0-2ubuntu3",
        "1:9.18.1-1ubuntu1",
        "1:9.18.1-1ubuntu1.1",
        "1:9.18.1-1ubuntu1.2",
        "1:9.18.1-1ubuntu1.3",
        "1:9.18.12-0ubuntu0.22.04.1",
        "1:9.18.12-0ubuntu0.22.04.2",
        "1:9.18.12-0ubuntu0.22.04.3",
        "1:9.18.18-0ubuntu0.22.04.1",
        "1:9.18.18-0ubuntu0.22.04.2",
        "1:9.18.24-0ubuntu0.22.04.1",
        "1:9.18.28-0ubuntu0.22.04.1",
        "1:9.18.30-0ubuntu0.22.04.1",
        "1:9.18.30-0ubuntu0.22.04.2",
        "1:9.18.39-0ubuntu0.22.04.1",
        "1:9.18.39-0ubuntu0.22.04.2",
        "1:9.18.39-0ubuntu0.22.04.3"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libbind9-161",
            "binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
          },
          {
            "binary_name": "libdns-export1110",
            "binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
          },
          {
            "binary_name": "libdns1110",
            "binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
          },
          {
            "binary_name": "libirs-export161",
            "binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
          },
          {
            "binary_name": "libirs161",
            "binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
          },
          {
            "binary_name": "libisc-export1105",
            "binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
          },
          {
            "binary_name": "libisc1105",
            "binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
          },
          {
            "binary_name": "libisccc-export161",
            "binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
          },
          {
            "binary_name": "libisccc161",
            "binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
          },
          {
            "binary_name": "libisccfg-export163",
            "binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
          },
          {
            "binary_name": "libisccfg163",
            "binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
          },
          {
            "binary_name": "liblwres161",
            "binary_version": "1:9.11.19+dfsg-2.1ubuntu3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "bind9-libs",
        "purl": "pkg:deb/ubuntu/bind9-libs@1:9.11.19+dfsg-2.1ubuntu3?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.11.19+dfsg-2.1ubuntu1",
        "1:9.11.19+dfsg-2.1ubuntu2",
        "1:9.11.19+dfsg-2.1ubuntu3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.18.39-0ubuntu0.24.04.5"
          },
          {
            "binary_name": "bind9-dnsutils",
            "binary_version": "1:9.18.39-0ubuntu0.24.04.5"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.18.39-0ubuntu0.24.04.5"
          },
          {
            "binary_name": "bind9-libs",
            "binary_version": "1:9.18.39-0ubuntu0.24.04.5"
          },
          {
            "binary_name": "bind9-utils",
            "binary_version": "1:9.18.39-0ubuntu0.24.04.5"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.18.39-0ubuntu0.24.04.5"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.18.39-0ubuntu0.24.04.5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.18.39-0ubuntu0.24.04.5?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.18.39-0ubuntu0.24.04.5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.18.18-0ubuntu2",
        "1:9.18.21-0ubuntu1",
        "1:9.18.24-0ubuntu3",
        "1:9.18.24-0ubuntu4",
        "1:9.18.24-0ubuntu5",
        "1:9.18.28-0ubuntu0.24.04.1",
        "1:9.18.30-0ubuntu0.24.04.1",
        "1:9.18.30-0ubuntu0.24.04.2",
        "1:9.18.39-0ubuntu0.24.04.1",
        "1:9.18.39-0ubuntu0.24.04.2",
        "1:9.18.39-0ubuntu0.24.04.3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.20.11-1ubuntu2.4"
          },
          {
            "binary_name": "bind9-dnsutils",
            "binary_version": "1:9.20.11-1ubuntu2.4"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.20.11-1ubuntu2.4"
          },
          {
            "binary_name": "bind9-libs",
            "binary_version": "1:9.20.11-1ubuntu2.4"
          },
          {
            "binary_name": "bind9-utils",
            "binary_version": "1:9.20.11-1ubuntu2.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.20.11-1ubuntu2.4?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.20.11-1ubuntu2.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.20.4-3ubuntu1",
        "1:9.20.4-3ubuntu2",
        "1:9.20.4-3ubuntu3",
        "1:9.20.9-2ubuntu1",
        "1:9.20.10-1ubuntu1",
        "1:9.20.11-1ubuntu1",
        "1:9.20.11-1ubuntu2",
        "1:9.20.11-1ubuntu2.1",
        "1:9.20.11-1ubuntu2.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.20.18-1ubuntu2.1"
          },
          {
            "binary_name": "bind9-dnsutils",
            "binary_version": "1:9.20.18-1ubuntu2.1"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.20.18-1ubuntu2.1"
          },
          {
            "binary_name": "bind9-libs",
            "binary_version": "1:9.20.18-1ubuntu2.1"
          },
          {
            "binary_name": "bind9-utils",
            "binary_version": "1:9.20.18-1ubuntu2.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.20.18-1ubuntu2.1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.20.18-1ubuntu2.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.20.11-1ubuntu2",
        "1:9.20.11-1ubuntu3",
        "1:9.20.18-1ubuntu1",
        "1:9.20.18-1ubuntu2"
      ]
    }
  ],
  "aliases": [],
  "details": "Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) \u2014 for example, `CHAOS` or `HESIOD`, or DNS messages that specify meta-classes (`ANY` or `NONE`) in the question section. Specially crafted requests reaching the affected code paths \u2014 recursion, dynamic updates (`UPDATE`), zone change notifications (`NOTIFY`), or processing of `IN`-specific record types in non-`IN` data \u2014 can cause assertion failures in `named`. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.",
  "id": "UBUNTU-CVE-2026-5946",
  "modified": "2026-08-27T01:11:03Z",
  "published": "2026-05-20T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-5946"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-5946"
    },
    {
      "type": "REPORT",
      "url": "https://kb.isc.org/docs/cve-2026-5946"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8293-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8682-1"
    }
  ],
  "related": [
    "USN-8293-1",
    "USN-8682-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-5946"
  ]
}

CVE-2026-5946 (GCVE-0-2026-5946)

Vulnerability from cvelistv5 – Published: 2026-05-20 13:10 – Updated: 2026-09-10 12:04

Title

Invalid handling of CLASS != IN

Summary

Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`, or DNS messages that specify meta-classes (`ANY` or `NONE`) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (`UPDATE`), zone change notifications (`NOTIFY`), or processing of `IN`-specific record types in non-`IN` data — can cause assertion failures in `named`. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-20 13:40 UTC

CWE

CWE-20 - Improper Input Validation
CWE-125 - Out-of-bounds Read
CWE-617 - Reachable Assertion
CWE-754 - Improper Check for Unusual or Exceptional Conditions
CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
CWE-1287 - Improper Validation of Specified Type of Input

Assigner

isc mitre root

References

17 references

URL	Tags
https://kb.isc.org/docs/cve-2026-5946	vendor-advisory
https://downloads.isc.org/isc/bind9/9.18.49	patch
https://downloads.isc.org/isc/bind9/9.20.23	patch
https://downloads.isc.org/isc/bind9/9.21.22	patch
https://access.redhat.com/security/cve/CVE-2026-5946	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2479771	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:60383	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:62549	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24338	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24339	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:23360	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:57189	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:55441	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24367	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:24368	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:20334	vendor-advisoryx_refsource_REDHAT

Impacted products

14 products

Vendor	Product	Version
ISC	BIND 9	Affected: 9.11.0 , ≤ 9.16.50 (custom) Affected: 9.18.0 , ≤ 9.18.48 (custom) Affected: 9.20.0 , ≤ 9.20.22 (custom) Affected: 9.21.0 , ≤ 9.21.21 (custom) Affected: 9.11.3-S1 , ≤ 9.16.50-S1 (custom) Affected: 9.18.11-S1 , ≤ 9.18.48-S1 (custom) Affected: 9.20.9-S1 , ≤ 9.20.22-S1 (custom) cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind:::::::: cpe:2.3:a:isc:bind::::::::
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 32:9.18.33-15.el10_2.2 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 32:9.11.4-26.P2.el7_9.21 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 32:9.16.23-0.22.el8_10.6 , < * (rpm) cpe:/a:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 32:9.11.36-16.el8_10.8 , < * (rpm) cpe:/a:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 32:9.16.23-40.el9_8.2 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 32:9.18.29-14.el9_8.2 , < * (rpm) cpe:/a:redhat:enterprise_linux:9
Red Hat	Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions	Unaffected: 32:9.16.23-18.el9_4.12 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.4
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 32:9.16.23-31.el9_6.4 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6
Red Hat	Red Hat OpenShift Container Platform 4.16	Unaffected: 416.94.202609011112-0 , < * (rpm) cpe:/a:redhat:openshift:4.16::el9
Red Hat	Red Hat Hardened Images	Unaffected: 9.18.49-1.hum1 , < * (rpm) cpe:/a:redhat:hummingbird:1
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4

Date Public

2026-05-20 00:00

Credits

ISC would like to thank Mcsky23 for bringing this vulnerability to our attention.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-5946",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-20T13:40:04.619504Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-20T13:40:20.966Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "packageName": "bind",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.18.33-15.el10_2.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:rhel_els:7"
            ],
            "defaultStatus": "affected",
            "packageName": "bind",
            "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.11.4-26.P2.el7_9.21",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "bind9.16",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.16.23-0.22.el8_10.6",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8",
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "packageName": "bind",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.11.36-16.el8_10.8",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "bind",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.16.23-40.el9_8.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "packageName": "bind9.18",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.18.29-14.el9_8.2",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_e4s:9.4"
            ],
            "defaultStatus": "affected",
            "packageName": "bind",
            "product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.16.23-18.el9_4.12",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:rhel_eus:9.6"
            ],
            "defaultStatus": "affected",
            "packageName": "bind",
            "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "32:9.16.23-31.el9_6.4",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4.16::el9"
            ],
            "defaultStatus": "affected",
            "packageName": "rhcos",
            "product": "Red Hat OpenShift Container Platform 4.16",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "416.94.202609011112-0",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:hummingbird:1"
            ],
            "defaultStatus": "affected",
            "packageName": "bind-main",
            "product": "Red Hat Hardened Images",
            "vendor": "Red Hat",
            "versions": [
              {
                "lessThan": "*",
                "status": "unaffected",
                "version": "9.18.49-1.hum1",
                "versionType": "rpm"
              }
            ]
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:6"
            ],
            "defaultStatus": "affected",
            "packageName": "bind",
            "product": "Red Hat Enterprise Linux 6",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "unaffected",
            "packageName": "dhcp",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "packageName": "openshift/ose-rhel-coreos-8",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-21T12:32:55.602Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in the bind component, specifically within the `named` daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System (DNS) messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the `named` daemon when processed. Successful exploitation leads to an application level Denial of Service (DoS), making the DNS service unavailable."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1287",
                "description": "Improper Validation of Specified Type of Input",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T12:04:59.946Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-5946"
          },
          {
            "name": "RHBZ#2479771",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2479771"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5946.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:60383"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:62549"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24338"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24339"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:23360"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:57189"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:55441"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24367"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:24368"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:20334"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:60383: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:62549: Red Hat OpenShift Container Platform 4.16"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24338: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24339: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux BaseOS (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:23360: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux CRB (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:57189: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:55441: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24367: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:24368: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:20334: Red Hat Hardened Images"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-19T09:57:49.705Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-21T12:32:55.602Z",
            "value": "Made public."
          }
        ],
        "title": "bind: BIND: Denial of Service via specially crafted DNS messages",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "BIND 9",
          "vendor": "ISC",
          "versions": [
            {
              "lessThanOrEqual": "9.16.50",
              "status": "affected",
              "version": "9.11.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.18.48",
              "status": "affected",
              "version": "9.18.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.22",
              "status": "affected",
              "version": "9.20.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.21.21",
              "status": "affected",
              "version": "9.21.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.16.50-S1",
              "status": "affected",
              "version": "9.11.3-S1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.18.48-S1",
              "status": "affected",
              "version": "9.18.11-S1",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "9.20.22-S1",
              "status": "affected",
              "version": "9.20.9-S1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.16.50",
                  "versionStartIncluding": "9.11.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.48",
                  "versionStartIncluding": "9.18.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.22",
                  "versionStartIncluding": "9.20.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.21.21",
                  "versionStartIncluding": "9.21.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.16.50-S1",
                  "versionStartIncluding": "9.11.3-S1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.18.48-S1",
                  "versionStartIncluding": "9.18.11-S1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "9.20.22-S1",
                  "versionStartIncluding": "9.20.9-S1",
                  "vulnerable": true
                }
              ],
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "ISC would like to thank Mcsky23 for bringing this vulnerability to our attention."
        }
      ],
      "datePublic": "2026-05-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) \u2014 for example, `CHAOS` or `HESIOD`, or DNS messages that specify meta-classes (`ANY` or `NONE`) in the question section. Specially crafted requests reaching the affected code paths \u2014 recursion, dynamic updates (`UPDATE`), zone change notifications (`NOTIFY`), or processing of `IN`-specific record types in non-`IN` data \u2014 can cause assertion failures in `named`.\nThis issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "We are not aware of any active exploits."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "An attacker able to send specially crafted DNS messages to an affected `named` instance can cause it to terminate unexpectedly, resulting in a denial of service."
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-617",
              "description": "CWE-617 Reachable Assertion",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-754",
              "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-843",
              "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-20T13:10:03.479Z",
        "orgId": "404fd4d2-a609-4245-b543-2c944a302a22",
        "shortName": "isc"
      },
      "references": [
        {
          "name": "CVE-2026-5946",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://kb.isc.org/docs/cve-2026-5946"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.18.49"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.20.23"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://downloads.isc.org/isc/bind9/9.21.22"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to the patched release most closely related to your current version of BIND 9: 9.18.49, 9.20.23, 9.21.22, 9.18.49-S1, or 9.20.23-S1."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Invalid handling of CLASS != IN",
      "workarounds": [
        {
          "lang": "en",
          "value": "Don\u0027t configure zones other than Internet (`IN`) class. Furthermore, do not expose the server that allows DNS Dynamic Update to the general Internet."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404fd4d2-a609-4245-b543-2c944a302a22",
    "assignerShortName": "isc",
    "cveId": "CVE-2026-5946",
    "datePublished": "2026-05-20T13:10:03.479Z",
    "dateReserved": "2026-04-09T06:40:07.319Z",
    "dateUpdated": "2026-09-10T12:04:59.946Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

usn-8293-1

Vulnerability from osv_ubuntu

Published

2026-05-21 19:11

Modified

2026-06-30 15:55

Summary

bind9 vulnerabilities

Details

Vitaly Simonovich discovered that Bind could exhaust memory during GSS-API TKEY negotiation. A remote attacker could possibly use this issue to cause Bind to use excessive resources, leading to a denial of service. (CVE-2026-3039)

Shuhan Zhang discovered that Bind incorrectly handled self-pointed glue records. A remote attacker could possibly use this issue to use Bind in denial of service amplification attacks against other systems. (CVE-2026-3592)

Naresh Kandula Parmar discovered that Bind incorrectly handled memory in the DNS-over-HTTPS implementation. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service, or execute arbitrary code. This issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-3593)

It was discovered that Bind incorrectly handled DNS messages whose class was not IN. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. (CVE-2026-5946)

Naoki Wakamatsu discovered that Bind incorrectly handled SIG(0) validation during a query flood. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. This issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-5947)

Billy Baraja discovered that Bind had an unbounded resend loop in the resolver. A remote attacker could possibly use this issue to cause Bind to use excessive resources, leading to a denial of service. (CVE-2026-5950)

References

URL

Type

	https://ubuntu.com/security/notices/USN-8293-1	ADVISORY
	https://ubuntu.com/security/CVE-2026-3039	REPORT
	https://ubuntu.com/security/CVE-2026-3592	REPORT
	https://ubuntu.com/security/CVE-2026-3593	REPORT
	https://ubuntu.com/security/CVE-2026-5946	REPORT
	https://ubuntu.com/security/CVE-2026-5947	REPORT
	https://ubuntu.com/security/CVE-2026-5950	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-3039",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-3592",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-5946",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-5950",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:22.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.18.39-0ubuntu0.22.04.4"
          },
          {
            "binary_name": "bind9-dnsutils",
            "binary_version": "1:9.18.39-0ubuntu0.22.04.4"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.18.39-0ubuntu0.22.04.4"
          },
          {
            "binary_name": "bind9-libs",
            "binary_version": "1:9.18.39-0ubuntu0.22.04.4"
          },
          {
            "binary_name": "bind9-utils",
            "binary_version": "1:9.18.39-0ubuntu0.22.04.4"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.18.39-0ubuntu0.22.04.4"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.18.39-0ubuntu0.22.04.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.18.39-0ubuntu0.22.04.4?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.18.39-0ubuntu0.22.04.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.16.15-1ubuntu1",
        "1:9.16.15-1ubuntu2",
        "1:9.16.15-1ubuntu3",
        "1:9.18.0-2ubuntu1",
        "1:9.18.0-2ubuntu2",
        "1:9.18.0-2ubuntu3",
        "1:9.18.1-1ubuntu1",
        "1:9.18.1-1ubuntu1.1",
        "1:9.18.1-1ubuntu1.2",
        "1:9.18.1-1ubuntu1.3",
        "1:9.18.12-0ubuntu0.22.04.1",
        "1:9.18.12-0ubuntu0.22.04.2",
        "1:9.18.12-0ubuntu0.22.04.3",
        "1:9.18.18-0ubuntu0.22.04.1",
        "1:9.18.18-0ubuntu0.22.04.2",
        "1:9.18.24-0ubuntu0.22.04.1",
        "1:9.18.28-0ubuntu0.22.04.1",
        "1:9.18.30-0ubuntu0.22.04.1",
        "1:9.18.30-0ubuntu0.22.04.2",
        "1:9.18.39-0ubuntu0.22.04.1",
        "1:9.18.39-0ubuntu0.22.04.2",
        "1:9.18.39-0ubuntu0.22.04.3"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-3039",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-3592",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-5946",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-5950",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:24.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.18.39-0ubuntu0.24.04.5"
          },
          {
            "binary_name": "bind9-dnsutils",
            "binary_version": "1:9.18.39-0ubuntu0.24.04.5"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.18.39-0ubuntu0.24.04.5"
          },
          {
            "binary_name": "bind9-libs",
            "binary_version": "1:9.18.39-0ubuntu0.24.04.5"
          },
          {
            "binary_name": "bind9-utils",
            "binary_version": "1:9.18.39-0ubuntu0.24.04.5"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.18.39-0ubuntu0.24.04.5"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.18.39-0ubuntu0.24.04.5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.18.39-0ubuntu0.24.04.5?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.18.39-0ubuntu0.24.04.5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.18.18-0ubuntu2",
        "1:9.18.21-0ubuntu1",
        "1:9.18.24-0ubuntu3",
        "1:9.18.24-0ubuntu4",
        "1:9.18.24-0ubuntu5",
        "1:9.18.28-0ubuntu0.24.04.1",
        "1:9.18.30-0ubuntu0.24.04.1",
        "1:9.18.30-0ubuntu0.24.04.2",
        "1:9.18.39-0ubuntu0.24.04.1",
        "1:9.18.39-0ubuntu0.24.04.2",
        "1:9.18.39-0ubuntu0.24.04.3"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-3039",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-3592",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-3593",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-5946",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-5947",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-5950",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:25.10"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.20.11-1ubuntu2.4"
          },
          {
            "binary_name": "bind9-dnsutils",
            "binary_version": "1:9.20.11-1ubuntu2.4"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.20.11-1ubuntu2.4"
          },
          {
            "binary_name": "bind9-libs",
            "binary_version": "1:9.20.11-1ubuntu2.4"
          },
          {
            "binary_name": "bind9-utils",
            "binary_version": "1:9.20.11-1ubuntu2.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.20.11-1ubuntu2.4?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.20.11-1ubuntu2.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.20.4-3ubuntu1",
        "1:9.20.4-3ubuntu2",
        "1:9.20.4-3ubuntu3",
        "1:9.20.9-2ubuntu1",
        "1:9.20.10-1ubuntu1",
        "1:9.20.11-1ubuntu1",
        "1:9.20.11-1ubuntu2",
        "1:9.20.11-1ubuntu2.1",
        "1:9.20.11-1ubuntu2.2"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-3039",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-3592",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-3593",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-5946",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-5947",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-5950",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:26.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.20.18-1ubuntu2.1"
          },
          {
            "binary_name": "bind9-dnsutils",
            "binary_version": "1:9.20.18-1ubuntu2.1"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.20.18-1ubuntu2.1"
          },
          {
            "binary_name": "bind9-libs",
            "binary_version": "1:9.20.18-1ubuntu2.1"
          },
          {
            "binary_name": "bind9-utils",
            "binary_version": "1:9.20.18-1ubuntu2.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.20.18-1ubuntu2.1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.20.18-1ubuntu2.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.20.11-1ubuntu2",
        "1:9.20.11-1ubuntu3",
        "1:9.20.18-1ubuntu1",
        "1:9.20.18-1ubuntu2"
      ]
    }
  ],
  "aliases": [],
  "details": "Vitaly Simonovich discovered that Bind could exhaust memory during GSS-API\nTKEY negotiation. A remote attacker could possibly use this issue to cause\nBind to use excessive resources, leading to a denial of service.\n(CVE-2026-3039)\n\nShuhan Zhang discovered that Bind incorrectly handled self-pointed glue\nrecords. A remote attacker could possibly use this issue to use Bind in\ndenial of service amplification attacks against other systems.\n(CVE-2026-3592)\n\nNaresh Kandula Parmar discovered that Bind incorrectly handled memory in\nthe DNS-over-HTTPS implementation. A remote attacker could possibly use\nthis issue to cause Bind to crash, resulting in a denial of service, or\nexecute arbitrary code. This issue only affected Ubuntu 25.10 and Ubuntu\n26.04 LTS. (CVE-2026-3593)\n\nIt was discovered that Bind incorrectly handled DNS messages whose class\nwas not IN. A remote attacker could possibly use this issue to cause Bind\nto crash, resulting in a denial of service. (CVE-2026-5946)\n\nNaoki Wakamatsu discovered that Bind incorrectly handled SIG(0) validation\nduring a query flood. A remote attacker could possibly use this issue to\ncause Bind to crash, resulting in a denial of service. This issue only\naffected Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-5947)\n\nBilly Baraja discovered that Bind had an unbounded resend loop in the\nresolver. A remote attacker could possibly use this issue to cause Bind to\nuse excessive resources, leading to a denial of service. (CVE-2026-5950)",
  "id": "USN-8293-1",
  "modified": "2026-06-30T15:55:19Z",
  "published": "2026-05-21T19:11:14Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8293-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-3039"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-3592"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-3593"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-5946"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-5947"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-5950"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "bind9 vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2026-3039",
    "UBUNTU-CVE-2026-3592",
    "UBUNTU-CVE-2026-3593",
    "UBUNTU-CVE-2026-5946",
    "UBUNTU-CVE-2026-5947",
    "UBUNTU-CVE-2026-5950"
  ]
}

usn-8682-1

Vulnerability from osv_ubuntu

Published

2026-08-26 16:49

Modified

2026-08-26 16:49

Summary

bind9 vulnerabilities

Details

References

URL

Type

	https://ubuntu.com/security/notices/USN-8682-1	ADVISORY
	https://ubuntu.com/security/CVE-2026-3039	REPORT
	https://ubuntu.com/security/CVE-2026-3592	REPORT
	https://ubuntu.com/security/CVE-2026-5946	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-3039",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:14.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm14"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm14"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm14"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm14"
          },
          {
            "binary_name": "host",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm14"
          },
          {
            "binary_name": "libbind9-90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm14"
          },
          {
            "binary_name": "libdns100",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm14"
          },
          {
            "binary_name": "libisc95",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm14"
          },
          {
            "binary_name": "libisccc90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm14"
          },
          {
            "binary_name": "libisccfg90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm14"
          },
          {
            "binary_name": "liblwres90",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm14"
          },
          {
            "binary_name": "lwresd",
            "binary_version": "1:9.9.5.dfsg-3ubuntu0.19+esm14"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.9.5.dfsg-3ubuntu0.19+esm14?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.9.5.dfsg-3ubuntu0.19+esm14"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.9.3.dfsg.P2-4ubuntu1",
        "1:9.9.3.dfsg.P2-4ubuntu2",
        "1:9.9.3.dfsg.P2-4ubuntu3",
        "1:9.9.5.dfsg-2",
        "1:9.9.5.dfsg-3",
        "1:9.9.5.dfsg-3ubuntu0.1",
        "1:9.9.5.dfsg-3ubuntu0.2",
        "1:9.9.5.dfsg-3ubuntu0.3",
        "1:9.9.5.dfsg-3ubuntu0.4",
        "1:9.9.5.dfsg-3ubuntu0.5",
        "1:9.9.5.dfsg-3ubuntu0.6",
        "1:9.9.5.dfsg-3ubuntu0.7",
        "1:9.9.5.dfsg-3ubuntu0.8",
        "1:9.9.5.dfsg-3ubuntu0.9",
        "1:9.9.5.dfsg-3ubuntu0.10",
        "1:9.9.5.dfsg-3ubuntu0.11",
        "1:9.9.5.dfsg-3ubuntu0.12",
        "1:9.9.5.dfsg-3ubuntu0.13",
        "1:9.9.5.dfsg-3ubuntu0.14",
        "1:9.9.5.dfsg-3ubuntu0.15",
        "1:9.9.5.dfsg-3ubuntu0.16",
        "1:9.9.5.dfsg-3ubuntu0.17",
        "1:9.9.5.dfsg-3ubuntu0.18",
        "1:9.9.5.dfsg-3ubuntu0.19",
        "1:9.9.5.dfsg-3ubuntu0.19+esm1",
        "1:9.9.5.dfsg-3ubuntu0.19+esm2",
        "1:9.9.5.dfsg-3ubuntu0.19+esm3",
        "1:9.9.5.dfsg-3ubuntu0.19+esm4",
        "1:9.9.5.dfsg-3ubuntu0.19+esm5",
        "1:9.9.5.dfsg-3ubuntu0.19+esm6",
        "1:9.9.5.dfsg-3ubuntu0.19+esm7",
        "1:9.9.5.dfsg-3ubuntu0.19+esm9",
        "1:9.9.5.dfsg-3ubuntu0.19+esm10",
        "1:9.9.5.dfsg-3ubuntu0.19+esm11",
        "1:9.9.5.dfsg-3ubuntu0.19+esm12",
        "1:9.9.5.dfsg-3ubuntu0.19+esm13"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-3039",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "host",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "libbind9-140",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "libdns-export162",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "libdns162",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "libirs-export141",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "libirs141",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "libisc-export160",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "libisc160",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "libisccc-export140",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "libisccc140",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "libisccfg-export140",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "libisccfg140",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "liblwres141",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          },
          {
            "binary_name": "lwresd",
            "binary_version": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.10.3.dfsg.P4-8ubuntu1.19+esm10?arch=source\u0026distro=esm-infra-legacy/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.10.3.dfsg.P4-8ubuntu1.19+esm10"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.9.5.dfsg-11ubuntu1",
        "1:9.9.5.dfsg-12",
        "1:9.9.5.dfsg-12.1",
        "1:9.9.5.dfsg-12.1ubuntu1",
        "1:9.10.3.dfsg.P2-4",
        "1:9.10.3.dfsg.P2-5",
        "1:9.10.3.dfsg.P4-3",
        "1:9.10.3.dfsg.P4-4",
        "1:9.10.3.dfsg.P4-5",
        "1:9.10.3.dfsg.P4-8",
        "1:9.10.3.dfsg.P4-8ubuntu1",
        "1:9.10.3.dfsg.P4-8ubuntu1.1",
        "1:9.10.3.dfsg.P4-8ubuntu1.2",
        "1:9.10.3.dfsg.P4-8ubuntu1.3",
        "1:9.10.3.dfsg.P4-8ubuntu1.4",
        "1:9.10.3.dfsg.P4-8ubuntu1.5",
        "1:9.10.3.dfsg.P4-8ubuntu1.6",
        "1:9.10.3.dfsg.P4-8ubuntu1.7",
        "1:9.10.3.dfsg.P4-8ubuntu1.8",
        "1:9.10.3.dfsg.P4-8ubuntu1.9",
        "1:9.10.3.dfsg.P4-8ubuntu1.10",
        "1:9.10.3.dfsg.P4-8ubuntu1.11",
        "1:9.10.3.dfsg.P4-8ubuntu1.12",
        "1:9.10.3.dfsg.P4-8ubuntu1.14",
        "1:9.10.3.dfsg.P4-8ubuntu1.15",
        "1:9.10.3.dfsg.P4-8ubuntu1.16",
        "1:9.10.3.dfsg.P4-8ubuntu1.17",
        "1:9.10.3.dfsg.P4-8ubuntu1.18",
        "1:9.10.3.dfsg.P4-8ubuntu1.19",
        "1:9.10.3.dfsg.P4-8ubuntu1.19+esm1",
        "1:9.10.3.dfsg.P4-8ubuntu1.19+esm2",
        "1:9.10.3.dfsg.P4-8ubuntu1.19+esm3",
        "1:9.10.3.dfsg.P4-8ubuntu1.19+esm5",
        "1:9.10.3.dfsg.P4-8ubuntu1.19+esm6",
        "1:9.10.3.dfsg.P4-8ubuntu1.19+esm7",
        "1:9.10.3.dfsg.P4-8ubuntu1.19+esm8",
        "1:9.10.3.dfsg.P4-8ubuntu1.19+esm9"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-3039",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-3592",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-5946",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libbind9-160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libdns-export1100",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libdns1100",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libirs-export160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libirs160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libisc-export169",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libisc169",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libisccc-export160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libisccc160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libisccfg-export160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "libisccfg160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          },
          {
            "binary_name": "liblwres160",
            "binary_version": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:18.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.11.3+dfsg-1ubuntu1.19+esm5?arch=source\u0026distro=esm-infra/bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.11.3+dfsg-1ubuntu1.19+esm5"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.10.3.dfsg.P4-12.6ubuntu1",
        "1:9.11.2.P1-1ubuntu2",
        "1:9.11.2.P1-1ubuntu3",
        "1:9.11.2.P1-1ubuntu4",
        "1:9.11.2.P1-1ubuntu5",
        "1:9.11.3+dfsg-1ubuntu1",
        "1:9.11.3+dfsg-1ubuntu1.1",
        "1:9.11.3+dfsg-1ubuntu1.2",
        "1:9.11.3+dfsg-1ubuntu1.3",
        "1:9.11.3+dfsg-1ubuntu1.5",
        "1:9.11.3+dfsg-1ubuntu1.7",
        "1:9.11.3+dfsg-1ubuntu1.8",
        "1:9.11.3+dfsg-1ubuntu1.9",
        "1:9.11.3+dfsg-1ubuntu1.10",
        "1:9.11.3+dfsg-1ubuntu1.11",
        "1:9.11.3+dfsg-1ubuntu1.12",
        "1:9.11.3+dfsg-1ubuntu1.13",
        "1:9.11.3+dfsg-1ubuntu1.14",
        "1:9.11.3+dfsg-1ubuntu1.15",
        "1:9.11.3+dfsg-1ubuntu1.16",
        "1:9.11.3+dfsg-1ubuntu1.17",
        "1:9.11.3+dfsg-1ubuntu1.18",
        "1:9.11.3+dfsg-1ubuntu1.19+esm1",
        "1:9.11.3+dfsg-1ubuntu1.19+esm2",
        "1:9.11.3+dfsg-1ubuntu1.19+esm3",
        "1:9.11.3+dfsg-1ubuntu1.19+esm4"
      ]
    },
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2026-3039",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-3592",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2026-5946",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:20.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "bind9",
            "binary_version": "1:9.18.30-0ubuntu0.20.04.2+esm2"
          },
          {
            "binary_name": "bind9-dnsutils",
            "binary_version": "1:9.18.30-0ubuntu0.20.04.2+esm2"
          },
          {
            "binary_name": "bind9-host",
            "binary_version": "1:9.18.30-0ubuntu0.20.04.2+esm2"
          },
          {
            "binary_name": "bind9-libs",
            "binary_version": "1:9.18.30-0ubuntu0.20.04.2+esm2"
          },
          {
            "binary_name": "bind9-utils",
            "binary_version": "1:9.18.30-0ubuntu0.20.04.2+esm2"
          },
          {
            "binary_name": "bind9utils",
            "binary_version": "1:9.18.30-0ubuntu0.20.04.2+esm2"
          },
          {
            "binary_name": "dnsutils",
            "binary_version": "1:9.18.30-0ubuntu0.20.04.2+esm2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:20.04:LTS",
        "name": "bind9",
        "purl": "pkg:deb/ubuntu/bind9@1:9.18.30-0ubuntu0.20.04.2+esm2?arch=source\u0026distro=esm-infra/focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1:9.18.30-0ubuntu0.20.04.2+esm2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1:9.11.5.P4+dfsg-5.1ubuntu2",
        "1:9.11.5.P4+dfsg-5.1ubuntu3",
        "1:9.11.5.P4+dfsg-5.1ubuntu4",
        "1:9.11.5.P4+dfsg-5.1ubuntu5",
        "1:9.11.14+dfsg-1ubuntu1",
        "1:9.11.14+dfsg-3ubuntu1",
        "1:9.16.0-1ubuntu3",
        "1:9.16.0-1ubuntu4",
        "1:9.16.0-1ubuntu5",
        "1:9.16.1-0ubuntu1",
        "1:9.16.1-0ubuntu2",
        "1:9.16.1-0ubuntu2.1",
        "1:9.16.1-0ubuntu2.2",
        "1:9.16.1-0ubuntu2.3",
        "1:9.16.1-0ubuntu2.4",
        "1:9.16.1-0ubuntu2.6",
        "1:9.16.1-0ubuntu2.7",
        "1:9.16.1-0ubuntu2.8",
        "1:9.16.1-0ubuntu2.9",
        "1:9.16.1-0ubuntu2.10",
        "1:9.16.1-0ubuntu2.11",
        "1:9.16.1-0ubuntu2.12",
        "1:9.16.1-0ubuntu2.14",
        "1:9.16.1-0ubuntu2.15",
        "1:9.16.1-0ubuntu2.16",
        "1:9.16.48-0ubuntu0.20.04.1",
        "1:9.18.28-0ubuntu0.20.04.1",
        "1:9.18.30-0ubuntu0.20.04.1",
        "1:9.18.30-0ubuntu0.20.04.2",
        "1:9.18.30-0ubuntu0.20.04.2+esm1"
      ]
    }
  ],
  "aliases": [],
  "details": "Vitaly Simonovich discovered that Bind could exhaust memory during\nGSS-API TKEY negotiation. A remote attacker could possibly use this\nissue to cause Bind to use excessive resources, leading to a denial of\nservice. (CVE-2026-3039)\n\nShuhan Zhang discovered that Bind incorrectly handled self-pointed glue\nrecords. A remote attacker could possibly use this issue to use Bind in\ndenial of service amplification attacks against other systems.\nThis issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.\n(CVE-2026-3592)\n\nIt was discovered that Bind incorrectly handled DNS messages whose\nclass was not IN. A remote attacker could possibly use this issue to\ncause Bind to crash, resulting in a denial of service. This issue only\naffected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2026-5946)",
  "id": "USN-8682-1",
  "modified": "2026-08-26T16:49:52Z",
  "published": "2026-08-26T16:49:52Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8682-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-3039"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-3592"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-5946"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "bind9 vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2026-3039",
    "UBUNTU-CVE-2026-3592",
    "UBUNTU-CVE-2026-5946"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

ubuntu-cve-2026-5946

Vulnerability from osv_ubuntu

CVE-2026-5946 (GCVE-0-2026-5946)

usn-8293-1

Vulnerability from osv_ubuntu

usn-8682-1

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature

Related by attack behaviour