CERTFR-2026-AVI-1365

vendorFRcertfr

FrançaisShown in its original language — a full translation is planned for a future version.

Multiples vulnérabilités dans ISC BIND

view advisory published 2026-10-22

A published security advisory; the vulnerabilities below are the ones it describes.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2026-97313UShigh7.5—
A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a denial of se…
CVE-2026-96888UShigh7.5—
A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects…
CVE-2026-94300UShigh8.1Exploit
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`". An attacker who can capture a previously signed UDP message can replay it while the negotiated…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan