A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an assertion failure while processing the redirect. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Oct 28, 2026 | Oct 21, 2026 |
| Amazon_linux_2023 | — | Upgrade bind-chrootUpgrade bindUpgrade bind-utils-debuginfoUpgrade bind-libsUpgrade bind-docUpgrade bind-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-utilsUpgrade bind-debugsourceUpgrade bind-libs-debuginfoUpgrade bind-develUpgrade bind-dnssec-utilsUpgrade bind-license | Oct 28, 2026 | Oct 21, 2026 |
| Oracle_linux | — | Upgrade bind-libsUpgrade bind-licenseUpgrade bind-dnssec-utilsUpgrade bindUpgrade bind-develUpgrade bind-utilsUpgrade bind-chrootUpgrade bind-doc | Oct 30, 2026 | Oct 21, 2026 |
| Redhat_linux | — | No solution exists | Oct 23, 2026 | Oct 21, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub