The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade bind | Jul 28, 2026 | Jul 22, 2026 |
| Amazon Linux Ami 2 | — | Upgrade bind-pkcs11-develUpgrade bind-debuginfoUpgrade bind-pkcs11Upgrade bind-export-develUpgrade bind-sdbUpgrade bind-export-libsUpgrade bind-sdb-chrootUpgrade bind-licenseUpgrade bindUpgrade bind-pkcs11-utilsUpgrade bind-lite-develUpgrade bind-libs-liteUpgrade bind-chrootUpgrade bind-pkcs11-libsUpgrade bind-utilsUpgrade bind-libsUpgrade bind-devel | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade bind-dnssec-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-licenseUpgrade bind-docUpgrade bind-chrootUpgrade bind-develUpgrade bind-libsUpgrade bind-debugsourceUpgrade bind-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-utilsUpgrade bind-dnssec-utilsUpgrade bind | Aug 10, 2026 | Jul 22, 2026 |
| Debian | — | Upgrade bind9 | Jul 28, 2026 | Jul 28, 2026 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory31 | Sep 16, 2026 | Sep 16, 2026 |
| Redhat Openshift | — | Upgrade rhcos | Aug 26, 2026 | Jul 22, 2026 |
| Redhat_linux | — | Upgrade bind9.18-utils-debuginfoUpgrade bind-sdb-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade bind-pkcs11-libsUpgrade bind9.16Upgrade bind9.16-utils-debuginfoUpgrade bind-develUpgrade bind9.18-docUpgrade bind9.18-develUpgrade bind9.16-debuginfoUpgrade python3-bindUpgrade bind-pkcs11Upgrade bind9.16-dnssec-utilsUpgrade bind-libs-debuginfoUpgrade bind9.16-develUpgrade bind-chrootUpgrade bind-export-libs-debuginfoUpgrade bind-libs-liteUpgrade bind9.16-chrootUpgrade bind9.16-libs-debuginfoUpgrade bind-debuginfoUpgrade bind9.18-debugsourceUpgrade bind-sdb-chrootUpgrade bind-dnssec-docUpgrade bind9.16-debugsourceNo solution existsUpgrade bind9.18-libs-debuginfoUpgrade bind9.18-libsUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind9.16-licenseUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-lite-develUpgrade bind-export-develUpgrade bindUpgrade bind-sdbUpgrade bind9.18-chrootUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-docUpgrade bind-utils-debuginfoUpgrade bind9.18-dnssec-utilsUpgrade bind9.16-libsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-export-libsUpgrade bind-dnssec-utils-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-utilsUpgrade bind9.18Upgrade bind-licenseUpgrade bind9.18-utilsUpgrade bind-pkcs11-develUpgrade python3-bind9.16Upgrade bind-debugsourceUpgrade bind-dnssec-utilsUpgrade bind9.18-debuginfoUpgrade bind9.16-utilsUpgrade bind9.16-doc | Jul 24, 2026 | Jul 22, 2026 |
| Rocky_linux | — | Upgrade bind9.16-chrootUpgrade bind9.18-debugsourceUpgrade bind9.18-libsUpgrade bindUpgrade bind9.16-dnssec-utilsUpgrade bind-chrootUpgrade bind-pkcs11Upgrade bind-sdb-debuginfoUpgrade bind-utilsUpgrade bind-sdb-chrootUpgrade bind9.16-libs-debuginfoUpgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind9.16Upgrade bind-lite-develUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind9.18-develUpgrade bind9.18Upgrade bind9.18-chrootUpgrade bind9.16-develUpgrade bind9.16-debugsourceUpgrade bind-export-libs-debuginfoUpgrade bind-develUpgrade bind9.16-debuginfoUpgrade bind-pkcs11-libsUpgrade bind9.18-libs-debuginfoUpgrade bind-debuginfoUpgrade bind-pkcs11-develUpgrade bind-libs-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-sdbUpgrade bind-export-develUpgrade bind-debugsourceUpgrade bind9.18-utils-debuginfoUpgrade bind-export-libsUpgrade bind9.18-dnssec-utilsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind9.16-utilsUpgrade bind9.18-utilsUpgrade bind9.18-debuginfoUpgrade bind9.16-libs | Aug 17, 2026 | Aug 15, 2026 |
| Ubuntu | — | Upgrade bind9 | Aug 19, 2026 | Aug 19, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 17, 2026 | Jul 22, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub