Bind vulnerabilities allow denial of service in Ubuntu 26.10
Bind mishandling of DNS messages and DNSSEC proofs could cause excessive memory use or crashes in Ubuntu 26.10.
Stories per day · 30 days
Relateddenial-of-service4dns4isc2ubuntu2advisory1cache-poisoning1cve-2025-407781cve-2025-86771dnssec1gitlab1ksmbd1linux-kernel1litellm1memory-corruption1named1nodejs1
9 stories, newest first · one card per story
Stories tagged #bind
pwn.watch lists GitLab RCE, leaked kernel bugs and LiteLLM compromise
The same live feed also covers BIND GSS-TSIG memory corruption, Node.js security releases, bank AI-agent logins and a Railway environment-variable incident.
14
ISC BIND 9 flaws can exhaust resources or crash named
Four CVEs cover message-processing exhaustion, GSS-TSIG memory corruption, and unexpected exits.
ISC discloses four vulnerabilities in BIND 9
One issue, CVE-2026-96888, can make named terminate when a redirect zone uses strict QNAME checks.
USN-8929-1: Bind vulnerabilities
Ubuntu patched Bind flaws that could cause denial of service or DNS cache poisoning.
BIND DNS Servers Hit by 14 Security Flaws Enabling Cache Poisoning and Remote Crashes
ISC patched 14 high-severity BIND 9 flaws enabling DNS cache poisoning, DNSSEC bypass, and remote crashes of exposed recursive resolvers.
2
BIND 9.20.29 Fixes 14 Security Flaws Enabling DNSSEC Bypass and Denial-of-Service Attacks
ISC released BIND 9.20.29 patching 14 flaws, including two DNSSEC validation bypasses enabling cache poisoning and multiple denial-of-service bugs.
7
BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPS
ISC released BIND 9.20.29 and 9.21.26 fixing 14 flaws, including an unauthenticated DoH crash (CVE-2026-77692) and DNSSEC cache poisoning issues; no exploitation reported.
6
ISC BIND security advisory (AV26-931)
Canadian Cyber Centre relays ISC advisory on vulnerabilities affecting multiple BIND 9 branches; administrators should review the matrix and apply updates.