RLSA-2026:90328: Moderate: bind security update
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.
Security Fix(es):
bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses (CVE-2026-19662)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
rocky-linux/bindto a version that resolves this vulnerability.Fixed in 2:9.18.33-15.el10_2.13
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The CVSS vector indicates exploitation is network-accessible, requires high attack complexity, and does not require privileges or user interaction. The issue is triggered through crafted DNSSEC responses.
What is the expected impact if exploitation succeeds?
The stated impact is denial of service, with availability rated high. No confidentiality or integrity impact is identified in the provided CVSS vector.