The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind-dnssec-utilsUpgrade bind-export-libsUpgrade bind9.18-chrootUpgrade python3-bind9.16Upgrade bind-docUpgrade bind-export-develUpgrade bind9.18-docUpgrade bind9.16-utilsUpgrade bindUpgrade bind9.18Upgrade bind-dnssec-docUpgrade bind9.18-libsUpgrade bind9.16-docUpgrade bind-licenseUpgrade bind9.16-libsUpgrade bind-sdbUpgrade bind9.16-dnssec-utilsUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-pkcs11-libsUpgrade bind-develUpgrade bind9.16Upgrade bind9.18-utilsUpgrade bind-libsUpgrade bind-lite-develUpgrade bind-pkcs11-utilsUpgrade python3-bindUpgrade bind-sdb-chrootUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bind9.18-dnssec-utilsUpgrade bind9.16-chrootUpgrade bind9.16-licenseUpgrade bind-pkcs11-develUpgrade bind9.16-develUpgrade bind9.18-devel | Oct 11, 2026 | Aug 13, 2026 |
| Alpine Linux | — | Upgrade bind | Jul 28, 2026 | Jul 22, 2026 |
| Amazon Linux Ami 2 | — | Upgrade bind-develUpgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bind-lite-develUpgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-pkcs11Upgrade bind-export-libsUpgrade bind-export-develUpgrade bind-licenseUpgrade bindUpgrade bind-debuginfoUpgrade bind-sdbUpgrade bind-pkcs11-develUpgrade bind-sdb-chroot | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade bind-docUpgrade bind-dnssec-utils-debuginfoUpgrade bind-licenseUpgrade bind-libs-debuginfoUpgrade bindUpgrade bind-utilsUpgrade bind-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-develUpgrade bind-debugsourceUpgrade bind-chrootUpgrade bind-dnssec-utilsUpgrade bind-libs | Aug 10, 2026 | Jul 22, 2026 |
| Debian | — | Upgrade bind9 | Jul 28, 2026 | Jul 28, 2026 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory31 | Sep 16, 2026 | Sep 16, 2026 |
| Oracle_linux | — | Upgrade bind-dnssec-docUpgrade bind-sdbUpgrade bind9.16-libsUpgrade bind-libs-liteUpgrade bind9.16-docUpgrade bind-docUpgrade bind-pkcs11-libsUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind-export-libsUpgrade bind-sdb-chrootUpgrade bind9.16-develUpgrade bind-pkcs11-utilsUpgrade bind-chrootUpgrade bind-dnssec-utilsUpgrade bind9.18-docUpgrade bind-export-develUpgrade bind9.18-develUpgrade bind9.18-dnssec-utilsUpgrade bind9.16-utilsUpgrade bind-pkcs11-develUpgrade bindUpgrade bind-pkcs11Upgrade python3-bind9.16Upgrade bind9.18-chrootUpgrade bind9.16-licenseUpgrade bind9.18Upgrade bind9.16Upgrade bind-libsUpgrade bind9.18-libsUpgrade python3-bindUpgrade bind9.18-utilsUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-chrootUpgrade bind-licenseUpgrade bind-devel | Oct 22, 2026 | Jul 22, 2026 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Aug 26, 2026 | Jul 22, 2026 |
| Redhat_linux | — | Upgrade bind9.18-utils-debuginfoNo solution existsUpgrade bind9.18-libs-debuginfoUpgrade bind-debuginfoUpgrade python3-bindUpgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bind9.16-dnssec-utilsUpgrade bind-develUpgrade bind-sdb-debuginfoUpgrade bind-chrootUpgrade bind-dnssec-docUpgrade bind-libs-liteUpgrade bind-libs-debuginfoUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-pkcs11-libsUpgrade bind9.16Upgrade bind-lite-develUpgrade bind9.16-licenseUpgrade bind9.16-develUpgrade bind9.18-libsUpgrade bind9.16-debuginfoUpgrade bind9.18-develUpgrade bind9.18-docUpgrade bind9.16-libs-debuginfoUpgrade bind9.18-debugsourceUpgrade bind-sdb-chrootUpgrade bind9.16-utils-debuginfoUpgrade bind-pkcs11Upgrade bind9.16-debugsourceUpgrade bind9.16-chrootUpgrade bind9.18-utilsUpgrade bind-dnssec-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-licenseUpgrade bind-pkcs11-develUpgrade bind-debugsourceUpgrade python3-bind9.16Upgrade bind-export-libsUpgrade bind-pkcs11-debuginfoUpgrade bind9.18-debuginfoUpgrade bind-utilsUpgrade bind9.18-chrootUpgrade bind9.16-libsUpgrade bind9.18Upgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-docUpgrade bind-libs-lite-debuginfoUpgrade bind9.16-utilsUpgrade bind-dnssec-utilsUpgrade bind-docUpgrade bind-export-develUpgrade bind-sdbUpgrade bindUpgrade bind9.18-dnssec-utils | Jul 24, 2026 | Jul 22, 2026 |
| Rocky_linux | — | Upgrade bind-pkcs11-develUpgrade bind9.16-libsUpgrade bind-export-develUpgrade bind9.18-utils-debuginfoUpgrade bind-debugsourceUpgrade bind-libs-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-utils-debuginfoUpgrade bind9.18-debuginfoUpgrade bind9.18-dnssec-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-export-libsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bindUpgrade bind9.18-develUpgrade bind9.18-chrootUpgrade bind9.16-develUpgrade bind-utilsUpgrade bind-pkcs11Upgrade bind-pkcs11-libsUpgrade bind9.18-libsUpgrade bind9.18-debugsourceUpgrade bind-develUpgrade bind-sdb-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-debugsourceUpgrade bind-chrootUpgrade bind9.16-debuginfoUpgrade bind9.16-chrootUpgrade bind-libs-liteUpgrade bind9.18Upgrade bind9.16-utils-debuginfoUpgrade bind9.16Upgrade bind9.18-libs-debuginfoUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bind-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind-sdb-chrootUpgrade bind-lite-develUpgrade bind-pkcs11-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-sdbUpgrade bind9.16-utilsUpgrade bind9.18-utils | Aug 17, 2026 | Aug 15, 2026 |
| Ubuntu | — | Upgrade bind9 (Ubuntu Pro)Upgrade bind9 | Aug 19, 2026 | Aug 19, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 17, 2026 | Jul 22, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub