BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Jul 28, 2026 | Jul 22, 2026 |
| Amazon Linux Ami 2 | — | Upgrade bind-libs-liteUpgrade bind-sdbUpgrade bind-libsUpgrade bind-export-libsUpgrade bind-debuginfoUpgrade bind-export-develUpgrade bind-lite-develUpgrade bindUpgrade bind-chrootUpgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind-pkcs11Upgrade bind-utilsUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind-licenseUpgrade bind-pkcs11-libs | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade bind-libsUpgrade bind-utils-debuginfoUpgrade bind-chrootUpgrade bindUpgrade bind-debuginfoUpgrade bind-debugsourceUpgrade bind-utilsUpgrade bind-docUpgrade bind-licenseUpgrade bind-libs-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-develUpgrade bind-dnssec-utils | Aug 10, 2026 | Jul 22, 2026 |
| Debian | — | Upgrade bind9 | Jul 28, 2026 | Jul 28, 2026 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory31 | Sep 16, 2026 | Sep 16, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Sep 3, 2026 | Jul 22, 2026 |
| Redhat_linux | — | Upgrade bind-sdbUpgrade bind9.16-utils-debuginfoUpgrade bind9.18-libsUpgrade bind-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-pkcs11Upgrade bind-pkcs11-utilsUpgrade python3-bind9.16Upgrade bind9.16-libs-debuginfoUpgrade bind9.18-develUpgrade bind9.18Upgrade bind9.18-libs-debuginfoUpgrade bind9.16-licenseUpgrade bind-debugsourceUpgrade bind-libsUpgrade bind-export-libs-debuginfoUpgrade bind9.16Upgrade bind-licenseUpgrade bindUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-chrootUpgrade bind-docUpgrade bind-develUpgrade bind-sdb-debuginfoUpgrade bind-export-develUpgrade bind9.18-chrootUpgrade bind-export-libsUpgrade bind9.16-debugsourceUpgrade bind9.16-develUpgrade bind9.16-libsUpgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade bind-libs-liteUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.18-utils-debuginfoUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind-chrootUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.18-utilsUpgrade bind-dnssec-docUpgrade python3-bindUpgrade bind9.18-dnssec-utilsUpgrade bind-utilsUpgrade bind-pkcs11-debuginfoUpgrade bind-libs-debuginfoNo solution existsUpgrade bind9.18-debuginfoUpgrade bind9.18-debugsourceUpgrade bind9.18-docUpgrade bind9.16-utilsUpgrade bind9.16-docUpgrade bind9.16-dnssec-utils-debuginfo | Jul 24, 2026 | Jul 22, 2026 |
| Rocky_linux | — | Upgrade bind-pkcs11-develUpgrade bind-export-libsUpgrade bind9.16-debuginfoUpgrade bind9.16-libsUpgrade bind9.18Upgrade bind-libs-liteUpgrade bind9.18-libs-debuginfoUpgrade bind-pkcs11Upgrade bind-sdb-chrootUpgrade bind9.16-dnssec-utilsUpgrade bind9.18-develUpgrade bind-export-libs-debuginfoUpgrade bind-develUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.18-debugsourceUpgrade bind-dnssec-utils-debuginfoUpgrade bind-export-develUpgrade bind-sdb-debuginfoUpgrade bind9.16Upgrade bind9.18-libsUpgrade bind-dnssec-utilsUpgrade bind9.18-utilsUpgrade bind-pkcs11-utilsUpgrade bind-libs-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind9.18-utils-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-lite-develUpgrade bindUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind9.18-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.18-chrootUpgrade bind-libsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-debugsourceUpgrade bind9.16-utilsUpgrade bind-libs-lite-debuginfoUpgrade bind-debuginfoUpgrade bind9.18-dnssec-utilsUpgrade bind-utils-debuginfoUpgrade bind-sdbUpgrade bind9.16-chrootUpgrade bind9.16-utils-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-utilsUpgrade bind9.16-devel | Aug 17, 2026 | Aug 15, 2026 |
| Ubuntu | — | Upgrade bind9 | Aug 19, 2026 | Aug 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub