Name: CVE-2026-3039: Missing Reference to Active Allocated Resource
Creator: Rapid7
Published: 2026-05-20T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2026-3039, CWE-770, CWE-771, CVSS 7.5, EPSS 0.01047

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade bind-sdbUpgrade bind9.18-libsUpgrade bind-pkcs11-utilsUpgrade bind9.16-develUpgrade bind-dnssec-docUpgrade bind9.16-docUpgrade bind-libs-liteUpgrade bind-docUpgrade bind-pkcs11Upgrade bind-lite-develUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind9.18-dnssec-utilsUpgrade bind-chrootUpgrade bind9.18-docUpgrade bindUpgrade bind9.18-chrootUpgrade bind-licenseUpgrade bind9.18Upgrade bind9.16-chrootUpgrade bind9.16-licenseUpgrade bind9.16-utilsUpgrade bind9.16-dnssec-utilsUpgrade bind-develUpgrade bind9.16-libsUpgrade python3-bind9.16Upgrade bind-libsUpgrade bind9.18-utilsUpgrade bind-export-libsUpgrade python3-bindUpgrade bind-export-develUpgrade bind9.16Upgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind9.18-develUpgrade bind-dnssec-utils	Jun 7, 2026	Jun 4, 2026
Alpine Linux	—	Upgrade bind	May 25, 2026	May 20, 2026
Amazon Linux Ami 2	—	Upgrade bind-sdbUpgrade bind-licenseUpgrade bind-sdb-chrootUpgrade bind-debuginfoUpgrade bind-develUpgrade bindUpgrade bind-export-develUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bind-lite-develUpgrade bind-utilsUpgrade bind-chrootUpgrade bind-export-libsUpgrade bind-pkcs11-libsUpgrade bind-libs-liteUpgrade bind-pkcs11-devel	Jun 9, 2026	Jun 9, 2026
Amazon_linux_2023	—	Upgrade bind-docUpgrade bind-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade bindUpgrade bind-debugsourceUpgrade bind-dnssec-utilsUpgrade bind-debuginfoUpgrade bind-licenseUpgrade bind-develUpgrade bind-dnssec-utils-debuginfoUpgrade bind-utilsUpgrade bind-libsUpgrade bind-chroot	May 28, 2026	May 20, 2026
Debian	—	Upgrade bind9	May 24, 2026	May 24, 2026
Oracle_linux	—	Upgrade bind-chrootUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind9.16-docUpgrade bind-sdbUpgrade bind9.16-develUpgrade bind9.16-licenseUpgrade bind-lite-develUpgrade bind9.16-libsUpgrade bind-export-libsUpgrade bind-pkcs11-develUpgrade bind-export-develUpgrade bind9.16-utilsUpgrade bind-develUpgrade python3-bindUpgrade bindUpgrade bind-licenseUpgrade bind-libsUpgrade bind-libs-liteUpgrade bind9.16Upgrade bind-pkcs11-utilsUpgrade python3-bind9.16Upgrade bind9.16-chrootUpgrade bind-pkcs11Upgrade bind-sdb-chrootUpgrade bind9.16-dnssec-utils	Jun 8, 2026	May 20, 2026
Redhat Openshift	—	Upgrade ose-rhel-coreos	Sep 11, 2026	May 21, 2026
Redhat_linux	—	Upgrade bind9.16-libs-debuginfoUpgrade bind-licenseUpgrade bind-libs-liteUpgrade bind9.18-utilsUpgrade python3-bindUpgrade bind-pkcs11-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind9.18-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade bind9.16-chrootUpgrade bind9.16Upgrade bind-utilsUpgrade bind9.18-debuginfoUpgrade bind-pkcs11Upgrade bind-sdb-debuginfoUpgrade bind9.18-develNo solution existsUpgrade bind9.16-utils-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-pkcs11-libsUpgrade bind9.18-debugsourceUpgrade bind-sdb-chrootUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-libsUpgrade bind9.16-debuginfoUpgrade bind9.16-licenseUpgrade bind9.16-debugsourceUpgrade bind-develUpgrade bind-pkcs11-develUpgrade bind9.18-dnssec-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind9.18-docUpgrade bind-export-libsUpgrade bind9.18-libsUpgrade bind-export-develUpgrade bind-dnssec-utils-debuginfoUpgrade bind-docUpgrade bind9.18Upgrade bind9.18-libs-debuginfoUpgrade python3-bind9.16Upgrade bind-dnssec-docUpgrade bind-chrootUpgrade bind9.18-chrootUpgrade bind9.16-utilsUpgrade bind-libs-lite-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.16-develUpgrade bind-lite-develUpgrade bind-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind-dnssec-utilsUpgrade bind9.16-docUpgrade bind-sdbUpgrade bindUpgrade bind-utils-debuginfoUpgrade bind9.16-libsUpgrade bind-debugsource	Jun 8, 2026	May 21, 2026
Rocky_linux	—	Upgrade bind9.18-debuginfoUpgrade bind-debugsourceUpgrade bind9.16-debugsourceUpgrade bind9.16-develUpgrade bind-utilsUpgrade bind-pkcs11-debuginfoUpgrade bindUpgrade bind-utils-debuginfoUpgrade bind9.18-dnssec-utils-debuginfoUpgrade bind-pkcs11-libsUpgrade bind9.18-chrootUpgrade bind9.18-utils-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind-chrootUpgrade bind9.16-libs-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-pkcs11Upgrade bind-develUpgrade bind9.18-dnssec-utilsUpgrade bind-sdbUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-libs-liteUpgrade bind-debuginfoUpgrade bind-lite-develUpgrade bind-libsUpgrade bind9.16-libsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-develUpgrade bind9.16-debuginfoUpgrade bind9.18-debugsourceUpgrade bind9.18-libs-debuginfoUpgrade bind-libs-debuginfoUpgrade bind9.18-develUpgrade bind9.16-chrootUpgrade bind9.16-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-sdb-chrootUpgrade bind9.16Upgrade bind-export-develUpgrade bind9.18-utilsUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-utilsUpgrade bind-export-libsUpgrade bind9.18Upgrade bind9.18-libsUpgrade bind-sdb-debuginfoUpgrade bind9.16-dnssec-utils	Jun 8, 2026	Jun 6, 2026
Suse	—	Upgrade bindUpgrade libdns1605Upgrade libirs1601Upgrade libirs-develUpgrade bind-modules-sqlite3Upgrade bind-chrootenvUpgrade python3-bindUpgrade bind-modules-mysqlUpgrade libisccfg1600Upgrade bind-develUpgrade libisccfg163Upgrade libisc1107Upgrade liblwres161Upgrade bind-docUpgrade libirs161Upgrade bind-modules-genericUpgrade bind-utilsUpgrade python-bindUpgrade libbind9-161Upgrade libisccc161Upgrade bind-modules-ldapUpgrade libisc1107-32bitUpgrade libdns1110Upgrade bind-modules-perlUpgrade bind-modules-bdbhptUpgrade libisc1606	Jun 8, 2026	Jun 5, 2026
Ubuntu	—	Upgrade bind9 (Ubuntu Pro)Upgrade bind9	May 25, 2026	May 21, 2026
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jun 17, 2026	May 20, 2026

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence