Bind vulnerabilities allow denial of service in Ubuntu 26.10
Bind mishandling of DNS messages and DNSSEC proofs could cause excessive memory use or crashes in Ubuntu 26.10.
35
- Mentions · 7d0
- Mentions · 30d2
- All mentions7
- First seenSep 4, 2026
- Last mentioned8d ago
Timeline
7 articles · newest firstUSN-8929-1: Bind vulnerabilities
Ubuntu patched Bind flaws that could cause denial of service or DNS cache poisoning.
34
U.S. CISA adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND flaws to its Known Exploited Vulnerabilities catalog
CISA added five exploited ProFTPD, ONLYOFFICE, Strapi, Struts, and BIND flaws to the KEV catalog.
78
BIND DNS Servers Hit by 14 Security Flaws Enabling Cache Poisoning and Remote Crashes
ISC patched 14 high-severity BIND 9 flaws enabling DNS cache poisoning, DNSSEC bypass, and remote crashes of exposed recursive resolvers.
62
BIND 9.20.29 Fixes 14 Security Flaws Enabling DNSSEC Bypass and Denial-of-Service Attacks
ISC released BIND 9.20.29 patching 14 flaws, including two DNSSEC validation bypasses enabling cache poisoning and multiple denial-of-service bugs.
52
BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS
ISC released BIND 9.20.29 and 9.21.26 fixing 14 flaws, including an unauthenticated DoH crash (CVE-2026-77692) and DNSSEC cache poisoning issues; no exploitation reported.
65
Hillingar - MirageOS Unikernels on NixOS
A technical write-up details Hillingar, enabling reproducible Nix-based builds and NixOS deployment of MirageOS OCaml unikernels such as authoritative DNS servers.
25
Related CVEs
by mentions- CVE-2025-40778<1%8.6Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache
- CVE-2025-867711%7.5Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion
- Algorithmic CPU-exhaustion DoS in ISC BIND 9 resolver via cached SVCB/HTTPS records
- Memory-Leak Denial of Service in ISC BIND Resolvers via Crafted SVCB/HTTPS Records
- Use-after-free denial of service in ISC BIND 9 recursive resolver (named)
- DNSSEC Insecurity-Proof Bypass in ISC BIND 9 Allows Forged Unsigned Answers
- DNSSEC Wildcard Non-Existence Bypass in ISC BIND 9 (named)
- Zone-cut mishandling in ISC BIND 9 enables cache poisoning via malformed zones
- CVE-2023-228944%4.9Sensitive-data leak in Strapi admin query filters (through 4.5.5)
- CVE-2026-5950<1%5.3An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticated attacker to…
Appears with
- ISCvendor · 3
- Internet Systems Consortiumorganization · 2
- Internet Systems Consortiumvendor · 2
- Integrity Technology Groupthreat actor · 1
- Ubuntuproduct · 1
- Canonicalvendor · 1
- Strapivendor · 1
- Microsoft Exchangeproduct · 1
- Microscanmalware · 1
- ONLYOFFICEvendor · 1
- U.S. Department of Justiceorganization · 1
- FBIorganization · 1
- ONLYOFFICE Docsproduct · 1
- Microsoftvendor · 1
- NixOSproduct · 1
- MirageOSproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.