Bug 2535445 (CVE-2026-19662) - CVE-2026-19662 bind9: bind: BIND 9: Denial of Service via crafted DNSSEC responses
Summary: CVE-2026-19662 bind9: bind: BIND 9: Denial of Service via crafted DNSSEC resp...
Keywords:
Status: NEW
Alias: CVE-2026-19662
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2535865
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-16 14:11 UTC by OSIDB Bzimport
Modified: 2026-11-02 18:52 UTC (History)
17 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2026:89745 0 None None None 2026-10-26 04:32:57 UTC
Red Hat Product Errata RHSA-2026:89746 0 None None None 2026-10-26 04:34:42 UTC
Red Hat Product Errata RHSA-2026:90328 0 None None None 2026-10-26 15:19:48 UTC
Red Hat Product Errata RHSA-2026:93925 0 None None None 2026-11-02 18:14:10 UTC
Red Hat Product Errata RHSA-2026:94011 0 None None None 2026-11-02 18:52:16 UTC

Description OSIDB Bzimport 2026-09-16 14:11:06 UTC 
An attacker may be able to cause a `named` resolver to abort. The attack requires inducing the victim resolver to send multiple queries for a DNSSEC-signed zone hosted by an authoritative server under the control of the attacker. If the auth responds with a particular sequence of crafted answers, and those answers arrive in a particular order with particular timing, the `named` resolver will encounter a use-after-free bug, and abort.
This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.
Comment 3 Jon Orris 2026-10-26 04:32:56 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:89745 https://access.redhat.com/errata/RHSA-2026:89745
Comment 4 Jon Orris 2026-10-26 04:34:40 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:89746 https://access.redhat.com/errata/RHSA-2026:89746
Comment 5 Jon Orris 2026-10-26 15:19:46 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:90328 https://access.redhat.com/errata/RHSA-2026:90328
Comment 6 Jon Orris 2026-11-02 18:14:08 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:93925 https://access.redhat.com/errata/RHSA-2026:93925
Comment 7 Jon Orris 2026-11-02 18:52:14 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:94011 https://access.redhat.com/errata/RHSA-2026:94011
Note You need to log in before you can comment on or make changes to this bug.