If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Jul 28, 2026 | Jul 22, 2026 |
| Amazon Linux Ami 2 | — | Upgrade bind-utilsUpgrade bind-lite-develUpgrade bind-pkcs11-develUpgrade bind-export-libsUpgrade bind-pkcs11-libsUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-develUpgrade bind-sdbUpgrade bind-libsUpgrade bindUpgrade bind-sdb-chrootUpgrade bind-pkcs11Upgrade bind-export-develUpgrade bind-licenseUpgrade bind-debuginfoUpgrade bind-pkcs11-utils | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade bind-libsUpgrade bind-debugsourceUpgrade bind-develUpgrade bind-licenseUpgrade bind-utils-debuginfoUpgrade bind-debuginfoUpgrade bindUpgrade bind-docUpgrade bind-utilsUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-chrootUpgrade bind-libs-debuginfo | Aug 10, 2026 | Jul 22, 2026 |
| Debian | — | Upgrade bind9 | Jul 28, 2026 | Jul 28, 2026 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Sep 7, 2026 | Sep 4, 2026 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory31 | Sep 16, 2026 | Sep 16, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 26, 2026 | Jul 22, 2026 |
| Redhat_linux | — | Upgrade bind9.18-chrootNo solution existsUpgrade bind-pkcs11-utilsUpgrade bind-sdb-chrootUpgrade bind-libs-lite-debuginfoUpgrade bind-utils-debuginfoUpgrade bind9.18-utils-debuginfoUpgrade bind-pkcs11-libsUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade bind9.16-develUpgrade bind9.18-dnssec-utilsUpgrade bind9.18-debuginfoUpgrade bind9.18-docUpgrade bind-sdbUpgrade bind-dnssec-utilsUpgrade bind-dnssec-docUpgrade bind-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind-chrootUpgrade bind9.18-develUpgrade bind-develUpgrade bind-export-libsUpgrade bind-utilsUpgrade bind9.16-docUpgrade bind9.16-libsUpgrade bind9.18-debugsourceUpgrade bind-libsUpgrade bind-debugsourceUpgrade bind-docUpgrade bind-licenseUpgrade bind9.16-dnssec-utilsUpgrade bind9.18-libsUpgrade bind9.16Upgrade bind-dnssec-utils-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-export-develUpgrade bind9.16-licenseUpgrade bind-libs-debuginfoUpgrade bind-pkcs11-develUpgrade bind9.16-utils-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind-pkcs11Upgrade bind9.16-utilsUpgrade bindUpgrade python3-bindUpgrade bind9.16-debuginfoUpgrade bind9.18-libs-debuginfoUpgrade bind9.18Upgrade bind-export-libs-debuginfoUpgrade bind9.18-utilsUpgrade python3-bind9.16Upgrade bind9.16-chroot | Jul 24, 2026 | Jul 22, 2026 |
| Rocky_linux | — | Upgrade bind-libsUpgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16-utilsUpgrade bind-lite-develUpgrade bind9.16-utils-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind9.16-debugsourceUpgrade bind9.16-dnssec-utilsUpgrade bind9.16Upgrade bind9.16-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-chrootUpgrade bind-pkcs11Upgrade bind-develUpgrade bind-libs-lite-debuginfoUpgrade bind9.16-develUpgrade bind-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.18-utils-debuginfoUpgrade bind9.18-debuginfoUpgrade bind9.18-debugsourceUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-export-libsUpgrade bind9.18-develUpgrade bind-sdb-debuginfoUpgrade bind-export-develUpgrade bind-sdb-chrootUpgrade bind-libs-liteUpgrade bind9.18-libsUpgrade bindUpgrade bind-libs-debuginfoUpgrade bind9.18-chrootUpgrade bind9.16-libsUpgrade bind-sdbUpgrade bind9.18-libs-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind-utilsUpgrade bind-debugsourceUpgrade bind9.18-dnssec-utilsUpgrade bind9.18Upgrade bind-pkcs11-debuginfoUpgrade bind-dnssec-utilsUpgrade bind9.18-utilsUpgrade bind-utils-debuginfo | Aug 17, 2026 | Aug 15, 2026 |
| Ubuntu | — | Upgrade bind9 | Aug 31, 2026 | Aug 31, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 17, 2026 | Jul 22, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub