CVE record · 2 sources
CVE-2026-77119
CVSS 5.9A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged…
- Vendor
- Canonical
- Product
- BIND
- CVSS
- 5.9
- EPSS
- 0.005 (p41)
- Exposure class
- Operating system, Edge / VPN / firewall
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Bind vulnerabilities
It was discovered that Bind incorrectly handled certain DNS messages with repeated singleton records such as SOA, CNAME, or DNAME records. A remote attacker could possibly use this issue to cause Bind to use excessive memory…
-
A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged…
A validly signed NSEC3 from an unrelated sibling zone may be accepted as an insecurity proof, downgrading a secure delegation and letting a forged unsigned answer through. This issue affects BIND 9 versions 9.11.0 through…