CVE record · 2 sources
CVE-2026-19033
CVSS 6.5For a secondary zone with transfers restricted by TSIG, `named` may start to serve the data provided in a zone transfer before the final message with…
- Vendor
- Canonical
- Product
- Ubuntu
- CVSS
- 6.5
- EPSS
- 0.005 (p41)
- Exposure class
- Operating system
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Bind vulnerabilities
It was discovered that Bind incorrectly handled certain DNS messages with repeated singleton records such as SOA, CNAME, or DNAME records. A remote attacker could possibly use this issue to cause Bind to use excessive memory…
-
For a secondary zone with transfers restricted by TSIG, `named` may start to serve the data provided in a zone transfer before the final message with…
For a secondary zone with transfers restricted by TSIG, `named` may start to serve the data provided in a zone transfer before the final message with the TSIG signature arrives. This could allow an attacker that does not actually…