Internet Systems Consortium

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 17, 2026
Last mentionedSep 17, 2026

Timeline

2 articles · newest first

BIND DNS Servers Hit by 14 Security Flaws Enabling Cache Poisoning and Remote Crashes

ISC patched 14 high-severity BIND 9 flaws enabling DNS cache poisoning, DNSSEC bypass, and remote crashes of exposed recursive resolvers.

Cyber Security NewsSep 17, 14:58 UTC · Sep 17, 2026VulnerabilityCVE-2025-40775 CVE-2025-40777 CVE-2025-40778+112

BIND 9.20.29 Fixes 14 Security Flaws Enabling DNSSEC Bypass and Denial-of-Service Attacks

ISC released BIND 9.20.29 patching 14 flaws, including two DNSSEC validation bypasses enabling cache poisoning and multiple denial-of-service bugs.

GBHackersSep 17, 11:24 UTC · Sep 17, 2026VulnerabilityCVE-2026-77119 CVE-2026-19941 CVE-2026-19668+47 · 2 reads

Related CVEs

by mentions

CVE-2026-817367.5
Algorithmic CPU-exhaustion DoS in ISC BIND 9 resolver via cached SVCB/HTTPS records
published Sep 16, 2026ISC BIND 9 (open-source branches)
CVE-2026-3104<1%7.5
A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain
published Mar 25, 2026isc bind
CVE-2026-59462%7.5
Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`…
published May 20, 2026isc bind
CVE-2026-815637.5
Memory-Leak Denial of Service in ISC BIND Resolvers via Crafted SVCB/HTTPS Records
published Sep 16, 2026Internet Systems Consortium (ISC) BIND 9 (recursive resolver)
CVE-2026-15192%7.5
If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU
published Mar 25, 2026isc bind
CVE-2026-3119<1%6.5
Under certain conditions, `named` may crash when processing a correctly signed query containing a TKEY record
published Mar 25, 2026isc bind
CVE-2026-783015.8
Zone-cut mishandling in ISC BIND 9 enables cache poisoning via malformed zones
published Sep 16, 2026ISC BIND 9 (named)
CVE-2026-5950<1%5.3
An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticated attacker to…
published May 20, 2026isc bind
CVE-2026-196685.3
Algorithmic complexity DoS in ISC BIND recursive resolvers via invalid DNSSEC records
published Sep 16, 2026ISC BIND 9 (recursive resolver)
CVE-2026-3592<1%5.3
BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack
published May 20, 2026isc bind

Appears with

Internet Systems Consortiumvendor · 2
BINDproduct · 2

Entities are extracted by the model from each article. First seen Sep 17, 2026, last mentioned Sep 17, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.