Bind vulnerabilities allow denial of service in Ubuntu 26.10
Original title: USN-8969-1: Bind vulnerabilities
Bind mishandling of DNS messages and DNSSEC proofs could cause excessive memory use or crashes in Ubuntu 26.10.
It was discovered that Bind incorrectly handled certain DNS messages with repeated singleton records such as SOA, CNAME, or DNAME records. A remote attacker could possibly use this issue to cause Bind to use excessive memory, leading to a denial of service. This issue only affected Ubuntu 26.10. (CVE-2026-75029) It was discovered that Bind incorrectly handled cached DNSSEC proofs. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. This issue only affected Ubuntu 26.10. (CVE-2026-19662) It was discovered that Bind incorrectly handled certain invalid DNSSEC records. A remote attacker could possibly use this issue to cause Bind to use…
- Bind mishandles repeated singleton DNS records causing excessive memory use
- Bind mishandles cached DNSSEC proofs causing crash
- Only affects Ubuntu 26.10
Impact: denial of service
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-19662+1 related CVE | Use-after-free denial of service in ISC BIND 9 recursive resolver (named) | 5.9 group max | — |
From the original article
It was discovered that Bind incorrectly handled certain DNS messages with repeated singleton records such as SOA, CNAME, or DNAME records. A remote attacker could possibly use this issue to cause Bind to use excessive memory, leading to a denial of service. This issue only affected Ubuntu 26.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.