CVE record · 3 sources
CVE-2026-97313
CVSS 7.5A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion…
- Vendor
- Canonical
- Product
- Ubuntu, BIND
- CVSS
- 7.5
- EPSS
- 0.005 (p41)
- Exposure class
- Operating system, Edge / VPN / firewall
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Bind vulnerabilities
It was discovered that Bind incorrectly handled certain DNS messages with repeated singleton records such as SOA, CNAME, or DNAME records. A remote attacker could possibly use this issue to cause Bind to use excessive memory…
-
A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion…
A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a denial of service. To be vulnerable, the BIND server must…