RHSA-2026:54071
Vulnerability from csaf_redhat - Published: 2026-08-12 02:57 - Updated: 2026-08-12 03:51Summary
Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Severity
Important
Notes
Topic: An update for Red Hat Hardened Images RPMs is now available.
Details: This update includes the following RPMs:
bind:
* bind-9.20.26-0.1.hum1 (aarch64, x86_64)
* bind-chroot-9.20.26-0.1.hum1 (aarch64, x86_64)
* bind-devel-9.20.26-0.1.hum1 (aarch64, x86_64)
* bind-dnssec-utils-9.20.26-0.1.hum1 (aarch64, x86_64)
* bind-doc-9.20.26-0.1.hum1 (noarch)
* bind-libs-9.20.26-0.1.hum1 (aarch64, x86_64)
* bind-utils-9.20.26-0.1.hum1 (aarch64, x86_64)
* bind-9.20.26-0.1.hum1.src (src)
Security Fix(es):
bind:
* CVE-2026-11721
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.
6.8 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:bind-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key (KEY, DNSKEY, etc.). That key must specify a PRIVATEDNS algorithm (253), and in the algorithm identifier, improperly give a length longer than the actual identifier data. The invalid identifier will be stored. If BIND later needs to render that record to text, it will use the invalid length during processing, leading to a consistency check failing.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:bind-main@aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of the BIND 9 software. This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:bind-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the max-cache-size parameter
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:bind-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
It is possible for an attacker's zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes named to produce a wildcard name for a zone that is shorter than the attacker's zone, which can result in cache poisoning. For this attack to have any effect, the resolver under attack must have set synth-from-dnssec yes; (which is the default).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:bind-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A query but delays the DNAME response and later responds negatively, named may quit unexpectedly. Or, if a client queries for a CNAME and A record for the same name to the resolver, and the authoritative server responds positively to the A query but delays the CNAME response and later responds with a self-referential CNAME, the same failure may occur.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:bind-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:bind-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone.
8.6 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Hardened Images:bind-main@aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@src | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Hardened Images:bind-main@x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
44 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for Red Hat Hardened Images RPMs is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "This update includes the following RPMs:\n\nbind:\n * bind-9.20.26-0.1.hum1 (aarch64, x86_64)\n * bind-chroot-9.20.26-0.1.hum1 (aarch64, x86_64)\n * bind-devel-9.20.26-0.1.hum1 (aarch64, x86_64)\n * bind-dnssec-utils-9.20.26-0.1.hum1 (aarch64, x86_64)\n * bind-doc-9.20.26-0.1.hum1 (noarch)\n * bind-libs-9.20.26-0.1.hum1 (aarch64, x86_64)\n * bind-utils-9.20.26-0.1.hum1 (aarch64, x86_64)\n * bind-9.20.26-0.1.hum1.src (src)\n\nSecurity Fix(es):\n\nbind:\n * CVE-2026-11721",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54071",
"url": "https://access.redhat.com/errata/RHSA-2026:54071"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11721",
"url": "https://access.redhat.com/security/cve/CVE-2026-11721"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://images.redhat.com/",
"url": "https://images.redhat.com/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10822",
"url": "https://access.redhat.com/security/cve/CVE-2026-10822"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-10723",
"url": "https://access.redhat.com/security/cve/CVE-2026-10723"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13204",
"url": "https://access.redhat.com/security/cve/CVE-2026-13204"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-12617",
"url": "https://access.redhat.com/security/cve/CVE-2026-12617"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11622",
"url": "https://access.redhat.com/security/cve/CVE-2026-11622"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13321",
"url": "https://access.redhat.com/security/cve/CVE-2026-13321"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-11331",
"url": "https://access.redhat.com/security/cve/CVE-2026-11331"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54071.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update",
"tracking": {
"current_release_date": "2026-08-12T03:51:09+00:00",
"generator": {
"date": "2026-08-12T03:51:09+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.14"
}
},
"id": "RHSA-2026:54071",
"initial_release_date": "2026-08-12T02:57:35+00:00",
"revision_history": [
{
"date": "2026-08-12T02:57:35+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-12T03:09:08+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-12T03:51:09+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Hardened Images",
"product": {
"name": "Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:hummingbird:1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Hardened Images"
},
{
"branches": [
{
"category": "product_version",
"name": "bind-main@aarch64",
"product": {
"name": "bind-main@aarch64",
"product_id": "bind-main@aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bind@9.20.26-0.1.hum1?arch=aarch64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-aarch64-rpms"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "bind-main@src",
"product": {
"name": "bind-main@src",
"product_id": "bind-main@src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bind@9.20.26-0.1.hum1?arch=src\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-source-rpms"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "bind-main@x86_64",
"product": {
"name": "bind-main@x86_64",
"product_id": "bind-main@x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bind@9.20.26-0.1.hum1?arch=x86_64\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "bind-main@noarch",
"product": {
"name": "bind-main@noarch",
"product_id": "bind-main@noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bind-doc@9.20.26-0.1.hum1?arch=noarch\u0026distro=hummingbird-20251124\u0026repository_id=public-hummingbird-x86_64-rpms"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bind-main@aarch64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:bind-main@aarch64"
},
"product_reference": "bind-main@aarch64",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bind-main@noarch as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:bind-main@noarch"
},
"product_reference": "bind-main@noarch",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bind-main@src as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:bind-main@src"
},
"product_reference": "bind-main@src",
"relates_to_product_reference": "Red Hat Hardened Images"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bind-main@x86_64 as a component of Red Hat Hardened Images",
"product_id": "Red Hat Hardened Images:bind-main@x86_64"
},
"product_reference": "bind-main@x86_64",
"relates_to_product_reference": "Red Hat Hardened Images"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-10723",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"discovery_date": "2026-07-21T21:13:55.893000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504560"
}
],
"notes": [
{
"category": "description",
"text": "BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bind: bind9: Incorrect acceptance of NSEC3 records",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in BIND allows an attacker to forge authenticated NXDOMAIN responses for sibling zones due to incorrect validation of child-zone NSEC3 records. Exploitation requires high attack complexity, limiting the immediate risk to Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10723"
},
{
"category": "external",
"summary": "RHBZ#2504560",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504560"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10723",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10723"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10723",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10723"
}
],
"release_date": "2026-07-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T02:57:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54071"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bind: bind9: Incorrect acceptance of NSEC3 records"
},
{
"cve": "CVE-2026-10822",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-07-21T21:26:08.520000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504598"
}
],
"notes": [
{
"category": "description",
"text": "If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit.\n\nBIND will first need to store a DNS record for a key (KEY, DNSKEY, etc.). That key must specify a PRIVATEDNS algorithm (253), and in the algorithm identifier, improperly give a length longer than the actual identifier data. The invalid identifier will be stored. If BIND later needs to render that record to text, it will use the invalid length during processing, leading to a consistency check failing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bind: bind9: Key Record using PRIVATEDNS algorithm may lead to exit",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-10822"
},
{
"category": "external",
"summary": "RHBZ#2504598",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504598"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-10822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-10822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10822"
}
],
"release_date": "2026-07-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T02:57:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54071"
},
{
"category": "workaround",
"details": "Upgrade to the patched release most closely related to your current version of BIND 9:\n\n- 9.20.26\n- 9.21.24\n\nBIND Supported Preview Edition is a special feature preview branch of BIND provided to eligible ISC support customers.\n\n- 9.20.26-S1",
"product_ids": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "bind: bind9: Key Record using PRIVATEDNS algorithm may lead to exit"
},
{
"cve": "CVE-2026-11331",
"discovery_date": "2026-07-21T16:15:37.317000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2503721"
}
],
"notes": [
{
"category": "description",
"text": "An attacker who knows (or guesses) that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of the BIND 9 software.\nThis issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.16.8-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bind9: bind: Potential wildcard CNAME RPZ policy bypass",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11331"
},
{
"category": "external",
"summary": "RHBZ#2503721",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503721"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11331",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11331"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11331",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11331"
}
],
"release_date": "2026-07-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T02:57:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54071"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "bind9: bind: Potential wildcard CNAME RPZ policy bypass"
},
{
"cve": "CVE-2026-11622",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"discovery_date": "2026-07-21T20:12:07.757000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504298"
}
],
"notes": [
{
"category": "description",
"text": "A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the max-cache-size parameter",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bind: bind9: Potential memory usage beyond configured limits",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in BIND\u0027s DNSSEC-validating resolver can lead to a denial of service. An attacker can trigger excessive memory usage by performing a random subdomain attack against a DNSSEC-signed zone, causing the resolver to exceed its `max-cache-size` limits. This is critical for Red Hat deployments where BIND is configured for DNSSEC validation and exposed to untrusted query sources.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11622"
},
{
"category": "external",
"summary": "RHBZ#2504298",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504298"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11622",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11622"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11622",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11622"
}
],
"release_date": "2026-07-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T02:57:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54071"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "bind: bind9: Potential memory usage beyond configured limits"
},
{
"cve": "CVE-2026-11721",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"discovery_date": "2026-07-21T20:22:21.905000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504338"
}
],
"notes": [
{
"category": "description",
"text": "It is possible for an attacker\u0027s zone to respond to a query with an RRSIG that has a smaller number of labels than the zone in which the RRSIG is contained. This causes named to produce a wildcard name for a zone that is shorter than the attacker\u0027s zone, which can result in cache poisoning. For this attack to have any effect, the resolver under attack must have set synth-from-dnssec yes; (which is the default).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-11721"
},
{
"category": "external",
"summary": "RHBZ#2504338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-11721",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-11721"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-11721",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11721"
}
],
"release_date": "2026-07-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T02:57:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54071"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "bind: bind9: Cache poisoning via label count discrepancy, RRSIG, wildcards"
},
{
"cve": "CVE-2026-12617",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-07-21T20:30:40.067000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504370"
}
],
"notes": [
{
"category": "description",
"text": "The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A query but delays the DNAME response and later responds negatively, named may quit unexpectedly. Or, if a client queries for a CNAME and A record for the same name to the resolver, and the authoritative server responds positively to the A query but delays the CNAME response and later responds with a self-referential CNAME, the same failure may occur.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bind: bind9: Record ordering based unexpected exit with CNAME or DNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in BIND can lead to a denial of service in Red Hat products. The `named` daemon may terminate unexpectedly when processing specific CNAME/DNAME and A record query orderings, coupled with precisely timed authoritative server responses. Exploitation requires an attacker to manipulate DNS responses from an authoritative server to a vulnerable resolver.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12617"
},
{
"category": "external",
"summary": "RHBZ#2504370",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504370"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12617",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12617"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12617",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12617"
}
],
"release_date": "2026-07-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T02:57:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54071"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "bind: bind9: Record ordering based unexpected exit with CNAME or DNAME"
},
{
"cve": "CVE-2026-13204",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-07-21T20:41:55.541000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504447"
}
],
"notes": [
{
"category": "description",
"text": "If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bind: bind9: Unexpected exit with NSEC and NSEC3 both present",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13204"
},
{
"category": "external",
"summary": "RHBZ#2504447",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504447"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13204",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13204"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13204",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13204"
}
],
"release_date": "2026-07-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T02:57:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54071"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "bind: bind9: Unexpected exit with NSEC and NSEC3 both present"
},
{
"cve": "CVE-2026-13321",
"discovery_date": "2026-07-21T19:40:30.464000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504166"
}
],
"notes": [
{
"category": "description",
"text": "The BIND resolver accepts validly-signed NSEC records where the \"Next Domain Name\" field points outside the signer\u0027s zone.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An attacker controlling any DNSSEC-signed zone can craft NSEC records that span into victim zones, enabling cross-zone cache poisoning with authenticated denial-of-service responses (AD=1).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13321"
},
{
"category": "external",
"summary": "RHBZ#2504166",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504166"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13321",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13321"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13321",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13321"
}
],
"release_date": "2026-07-22T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-12T02:57:35+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/",
"product_ids": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54071"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Hardened Images:bind-main@aarch64",
"Red Hat Hardened Images:bind-main@noarch",
"Red Hat Hardened Images:bind-main@src",
"Red Hat Hardened Images:bind-main@x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "bind: bind9: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…