Multiple security vulnerabilities have been identified in BIND 9.16, the Berkeley Internet Name Domain DNS implementation, affecting Red Hat Enterprise Linux 8. These include denial of service issues via crafted DNSSEC responses, unbounded processing of crafted DNS messages, assertion failures during redirect and RPZ query processing, and an arbitrary code execution vulnerability via GSS-TSIG UDP message replay. Red Hat has released an important security update to address these issues.

Red Hat Security Advisory: bind9.16 security update

Multiple security vulnerabilities have been identified and addressed in the Berkeley Internet Name Domain (BIND) software used in Red Hat Enterprise Linux 8. These include denial of service via crafted DNSSEC responses and unbounded processing of crafted DNS messages, as well as arbitrary code execution via GSS-TSIG UDP message replay. An update is available to fix these issues along with other bug fixes and enhancements.

Red Hat Security Advisory: bind security, bug fix, and enhancement update

Multiple security vulnerabilities have been identified in the Berkeley Internet Name Domain (BIND) implementation used in Red Hat Enterprise Linux 9. These include denial of service issues via unbounded processing of crafted DNS messages and assertion failures during redirect and RPZ query processing, as well as an arbitrary code execution vulnerability via GSS-TSIG UDP message replay. Red Hat has released security updates addressing these issues.

Red Hat Security Advisory: bind security update

bind

bind-chroot

bind-devel

bind-dnssec-doc

bind-dnssec-utils

bind-doc

bind-libs

bind-license

bind-utils

python3-bind

BIND, a widely used DNS implementation, has multiple security vulnerabilities including a denial of service (DoS) via unbounded processing of crafted DNS messages (CVE-2026-19630). Other issues fixed in the same update include arbitrary code execution via GSS-TSIG UDP message replay and additional DoS vulnerabilities. These flaws affect versions prior to 32:9.16.23-40.el9_8.13. A security update is available from Red Hat to address these issues.

Important: bind security update (CVE-2026-19630)

Multiple security vulnerabilities have been identified in BIND 9.18, the DNS server software included with Red Hat Enterprise Linux 9. These include denial of service issues via unbounded processing of crafted DNS messages, assertion failures during redirect and RPZ query processing, and an arbitrary code execution vulnerability via GSS-TSIG UDP message replay. Red Hat has released an important security update addressing these issues for various Red Hat Enterprise Linux 9 variants and related products.

Red Hat Security Advisory: bind9.18 security update

CVE-2026-19630 is a vulnerability in Microsoft software version 3.0 involving amplified resource exhaustion during inbound message processing. The issue relates to inefficient handling of incoming messages that could lead to excessive consumption of system resources.

Amplified resource exhaustion in inbound message processing

bind9.18

bind9.18-chroot

bind9.18-devel

bind9.18-dnssec-utils

bind9.18-doc

bind9.18-libs

bind9.18-utils

BIND 9.18 has multiple security vulnerabilities including a denial of service via unbounded processing of crafted DNS messages (CVE-2026-19630), arbitrary code execution via GSS-TSIG UDP message replay, and denial of service via assertion failures in redirect and RPZ query processing. These issues affect versions prior to 9.18.29-14.el9_8.12. A security update is available from Red Hat to address these vulnerabilities.

Important: bind9.18 security update (CVE-2026-19630)

Multiple security vulnerabilities have been identified in the Berkeley Internet Name Domain (BIND) DNS software, affecting Red Hat Enterprise Linux 10.2 and related products. The issues include denial of service via unbounded processing of crafted DNS messages, denial of service via assertion failures during redirect and RPZ query processing, and arbitrary code execution through GSS-TSIG UDP message replay. Red Hat has issued an important security advisory with updates to address these vulnerabilities.

BIND, a widely used DNS implementation, has multiple security vulnerabilities including CVE-2026-19630, which allows denial of service via unbounded processing of crafted DNS messages. Other issues include arbitrary code execution via GSS-TSIG UDP message replay and denial of service through assertion failures during redirect and RPZ query processing. These vulnerabilities affect versions prior to 32:9.18.33-15.el10_2.14. A security update addressing these issues is available from Red Hat.

A vulnerability in BIND within Red Hat Hardened Images can cause a denial of service (DoS) by triggering an assertion failure when processing recursive and non-recursive DNS queries with multiple Response Policy Zones (RPZ) configured with conflicting recursion settings. This flaw requires a specific non-default configuration and can cause the BIND service to crash, disrupting DNS resolution for dependent infrastructure.

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

bind9

A vulnerability in BIND resolver allows specially crafted inbound DNS messages with a particular structure to cause excessive CPU and memory consumption. This affects multiple BIND 9 versions and can lead to denial of service due to resource exhaustion. The issue is identified as CVE-2026-19630 with a high severity rating.

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. (CVE-2026-19630)

isc-dhcp

bind9-libs

A high severity vulnerability (CVE-2026-19630) affecting specific versions of Bind9 has been published. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to availability, with no confidentiality or integrity impact reported. Multiple specific Ubuntu package versions of Bind9 are affected.

Bind9: In a BIND resolver, inbound DNS protocol messages with a particular structure will result in… (CVE-2026-19630)

CVE-2026-19630 is a vulnerability in ISC BIND 9 DNS resolver where specially crafted inbound DNS messages with a particular structure cause excessive CPU and memory consumption. This occurs because BIND imposes no limit on processing these structures, leading to inefficient algorithmic complexity. The issue affects multiple BIND 9 versions from 9.11.0 through 9.21.26 and their corresponding S1 variants.

Search: CVE-2026-19630