REDHAT-BUG-2504560: Medium severity ISC BIND vulnerability
Published Jul 21, 2026
·Updated
BIND may accept incorrect child-zone NSEC3 records as valid, allowing forged authenticated NXDOMAIN responses for sibling zones. AC:H (high complexity) keeps severity at Medium despite S:C.
Affected Software
1 affected component
ISC BIND
Event History
Jul 21, 2026
Data Sourced
via Red Hat·09:17 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2504560?
The severity of REDHAT-BUG-2504560 is classified as medium (4).
2
How do I fix REDHAT-BUG-2504560?
To fix REDHAT-BUG-2504560, ensure you apply the latest patches available for ISC BIND as recommended in the official documentation.
3
What impact does REDHAT-BUG-2504560 have on my system?
REDHAT-BUG-2504560 can allow forged authenticated NXDOMAIN responses, potentially impacting domain name resolution for sibling zones.
4
Which software is affected by REDHAT-BUG-2504560?
The affected software by REDHAT-BUG-2504560 is ISC BIND.
5
When was REDHAT-BUG-2504560 published?
REDHAT-BUG-2504560 was published on July 21, 2026.