CVE-2026-5946

EUVD-2026-31107

20.05.2026, 13:16

Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`, or DNS messages that specify meta-classes (`ANY` or `NONE`) in the question section. Specially crafted requests reaching the affected code paths — recursion, dynamic updates (`UPDATE`), zone change notifications (`NOTIFY`), or processing of `IN`-specific record types in non-`IN` data — can cause assertion failures in `named`.
This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 77.6%

Affected Products (NVD)

Vendor	Product	Version
isc	bind	9.11.0 ≤ 𝑥 ≤ 9.16.50
isc	bind	9.18.0 ≤ 𝑥 < 9.18.49
isc	bind	9.20.0 ≤ 𝑥 < 9.20.23
isc	bind	9.21.0 ≤ 𝑥 < 9.21.22

𝑥

= Vulnerable software versions

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
Red Hat	Red Hat Enterprise Linux 10	32:9.18.33-15.el10_2.2 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8	32:9.16.23-0.22.el8_10.6 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8	32:9.11.36-16.el8_10.8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9	32:9.16.23-40.el9_8.2 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9	32:9.18.29-14.el9_8.2 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	32:9.16.23-31.el9_6.4 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Hardened Images	9.18.49-1.hum1 ≤ 𝑥 < *	ADP

Debian Releases

Debian Product

Codename

bind9

bookworm	vulnerable
bookworm (security)	1:9.18.49-1~deb12u2 fixed
bullseye	vulnerable
bullseye (security)	1:9.16.50-1~deb11u6 fixed
forky	1:9.20.26-1 fixed
sid	1:9.20.26-1 fixed
trixie	1:9.20.23-1~deb13u1 fixed
trixie (security)	1:9.20.26-1~deb13u1 fixed

Ubuntu Releases

Ubuntu Product

Codename

bind9

bionic	needed
focal	needed
jammy	Fixed 1:9.18.39-0ubuntu0.22.04.4 released
noble	Fixed 1:9.18.39-0ubuntu0.24.04.5 released
questing	Fixed 1:9.20.11-1ubuntu2.4 released
resolute	Fixed 1:9.20.18-1ubuntu2.1 released
trusty	not-affected
xenial	not-affected

bind9-libs

focal	needed
jammy	needed
noble	dne
questing	dne
resolute	dne

isc-dhcp

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
questing	not-affected
resolute	not-affected
trusty	not-affected
xenial	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

bind

suse enterprise sap 15 SP7	9.20.23-150700.3.25.1 fixed
suse enterprise server 12 SP5	9.11.22-3.71.1 fixed
suse enterprise server 15 SP4	9.16.50-150400.5.62.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.38.1 fixed
suse enterprise server 15 SP6	9.18.49-150600.3.26.1 fixed
suse enterprise server 15 SP7	9.20.23-150700.3.25.1 fixed

bind-chrootenv

suse enterprise server 12 SP5

9.11.22-3.71.1

fixed

bind-devel

suse enterprise server 12 SP5

9.11.22-3.71.1

fixed

bind-doc

suse enterprise sap 15 SP7	9.20.23-150700.3.25.1 fixed
suse enterprise server 12 SP5	9.11.22-3.71.1 fixed
suse enterprise server 15 SP4	9.16.50-150400.5.62.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.38.1 fixed
suse enterprise server 15 SP6	9.18.49-150600.3.26.1 fixed
suse enterprise server 15 SP7	9.20.23-150700.3.25.1 fixed

bind-utils

suse enterprise desktop 15 SP7	9.20.23-150700.3.25.1 fixed
suse enterprise sap 15 SP7	9.20.23-150700.3.25.1 fixed
suse enterprise server 12 SP5	9.11.22-3.71.1 fixed
suse enterprise server 15 SP4	9.16.50-150400.5.62.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.38.1 fixed
suse enterprise server 15 SP6	9.18.49-150600.3.26.1 fixed
suse enterprise server 15 SP7	9.20.23-150700.3.25.1 fixed

libbind9-161

suse enterprise server 12 SP5

9.11.22-3.71.1

fixed

libdns1110

suse enterprise server 12 SP5

9.11.22-3.71.1

fixed

libdns1605

suse enterprise desktop 15 SP7	9.16.6-150300.22.59.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.59.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.59.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.59.1 fixed

libirs-devel

suse enterprise desktop 15 SP7	9.16.6-150300.22.59.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.59.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.59.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.59.1 fixed

libirs1601

suse enterprise desktop 15 SP7	9.16.6-150300.22.59.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.59.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.59.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.59.1 fixed

libirs161

suse enterprise server 12 SP5

9.11.22-3.71.1

fixed

libisc1107

suse enterprise server 12 SP5

9.11.22-3.71.1

fixed

libisc1107-32bit

suse enterprise server 12 SP5

9.11.22-3.71.1

fixed

libisc1606

suse enterprise desktop 15 SP7	9.16.6-150300.22.59.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.59.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.59.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.59.1 fixed

libisccc161

suse enterprise server 12 SP5

9.11.22-3.71.1

fixed

libisccfg1600

suse enterprise desktop 15 SP7	9.16.6-150300.22.59.1 fixed
suse enterprise sap 15 SP7	9.16.6-150300.22.59.1 fixed
suse enterprise server 15 SP6	9.16.6-150300.22.59.1 fixed
suse enterprise server 15 SP7	9.16.6-150300.22.59.1 fixed

libisccfg163

suse enterprise server 12 SP5

9.11.22-3.71.1

fixed

liblwres161

suse enterprise server 12 SP5

9.11.22-3.71.1

fixed

python-bind

suse enterprise server 12 SP5

9.11.22-3.71.1

fixed

python3-bind

suse enterprise server 15 SP4	9.16.50-150400.5.62.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.38.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

bind

RHEL 8	32:9.11.36-16.el8_10.8 fixed
RHEL 9	32:9.16.23-40.el9_8.2 fixed

bind-chroot

RHEL 8	32:9.11.36-16.el8_10.8 fixed
RHEL 9	32:9.16.23-40.el9_8.2 fixed

bind-devel

RHEL 8	32:9.11.36-16.el8_10.8 fixed
RHEL 9	32:9.16.23-40.el9_8.2 fixed

bind-dnssec-doc

RHEL 9

32:9.16.23-40.el9_8.2

fixed

bind-dnssec-utils

RHEL 9

32:9.16.23-40.el9_8.2

fixed

bind-doc

RHEL 9

32:9.16.23-40.el9_8.2

fixed

bind-export-devel

RHEL 8

32:9.11.36-16.el8_10.8

fixed

bind-export-libs

RHEL 8

32:9.11.36-16.el8_10.8

fixed

bind-libs

RHEL 8	32:9.11.36-16.el8_10.8 fixed
RHEL 9	32:9.16.23-40.el9_8.2 fixed

bind-libs-lite

RHEL 8

32:9.11.36-16.el8_10.8

fixed

bind-license

RHEL 8	32:9.11.36-16.el8_10.8 fixed
RHEL 9	32:9.16.23-40.el9_8.2 fixed

bind-lite-devel

RHEL 8

32:9.11.36-16.el8_10.8

fixed

bind-pkcs11

RHEL 8

32:9.11.36-16.el8_10.8

fixed

bind-pkcs11-devel

RHEL 8

32:9.11.36-16.el8_10.8

fixed

bind-pkcs11-libs

RHEL 8

32:9.11.36-16.el8_10.8

fixed

bind-pkcs11-utils

RHEL 8

32:9.11.36-16.el8_10.8

fixed

bind-sdb

RHEL 8

32:9.11.36-16.el8_10.8

fixed

bind-sdb-chroot

RHEL 8

32:9.11.36-16.el8_10.8

fixed

bind-utils

RHEL 8	32:9.11.36-16.el8_10.8 fixed
RHEL 9	32:9.16.23-40.el9_8.2 fixed

bind9.16

RHEL 8

32:9.16.23-0.22.el8_10.6

fixed

bind9.16-chroot

RHEL 8

32:9.16.23-0.22.el8_10.6

fixed

bind9.16-devel

RHEL 8

32:9.16.23-0.22.el8_10.6

fixed

bind9.16-dnssec-utils

RHEL 8

32:9.16.23-0.22.el8_10.6

fixed

bind9.16-doc

RHEL 8

32:9.16.23-0.22.el8_10.6

fixed

bind9.16-libs

RHEL 8

32:9.16.23-0.22.el8_10.6

fixed

bind9.16-license

RHEL 8

32:9.16.23-0.22.el8_10.6

fixed

bind9.16-utils

RHEL 8

32:9.16.23-0.22.el8_10.6

fixed

bind9.18

RHEL 9

32:9.18.29-14.el9_8.2

fixed

bind9.18-chroot

RHEL 9

32:9.18.29-14.el9_8.2

fixed

bind9.18-devel

RHEL 9

32:9.18.29-14.el9_8.2

fixed

bind9.18-dnssec-utils

RHEL 9

32:9.18.29-14.el9_8.2

fixed

bind9.18-doc

RHEL 9

32:9.18.29-14.el9_8.2

fixed

bind9.18-libs

RHEL 9

32:9.18.29-14.el9_8.2

fixed

bind9.18-utils

RHEL 9

32:9.18.29-14.el9_8.2

fixed

python3-bind

RHEL 8	32:9.11.36-16.el8_10.8 fixed
RHEL 9	32:9.16.23-40.el9_8.2 fixed

python3-bind9.16

RHEL 8

32:9.16.23-0.22.el8_10.6

fixed

Amazon Linux Releases

Amazon Package

Release

bind

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.15 fixed
Amazon Linux 2023	32:9.18.49-1.amzn2023.0.1 fixed

bind-chroot

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.15 fixed
Amazon Linux 2023	32:9.18.49-1.amzn2023.0.1 fixed

bind-debuginfo

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.15 fixed
Amazon Linux 2023	32:9.18.49-1.amzn2023.0.1 fixed

bind-debugsource

Amazon Linux 2023

32:9.18.49-1.amzn2023.0.1

fixed

bind-devel

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.15 fixed
Amazon Linux 2023	32:9.18.49-1.amzn2023.0.1 fixed

bind-dnssec-utils

Amazon Linux 2023

32:9.18.49-1.amzn2023.0.1

fixed

bind-dnssec-utils-debuginfo

Amazon Linux 2023

32:9.18.49-1.amzn2023.0.1

fixed

bind-doc

Amazon Linux 2023

32:9.18.49-1.amzn2023.0.1

fixed

bind-export-devel

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.15

fixed

bind-export-libs

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.15

fixed

bind-libs

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.15 fixed
Amazon Linux 2023	32:9.18.49-1.amzn2023.0.1 fixed

bind-libs-debuginfo

Amazon Linux 2023

32:9.18.49-1.amzn2023.0.1

fixed

bind-libs-lite

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.15

fixed

bind-license

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.15 fixed
Amazon Linux 2023	32:9.18.49-1.amzn2023.0.1 fixed

bind-lite-devel

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.15

fixed

bind-pkcs11

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.15

fixed

bind-pkcs11-devel

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.15

fixed

bind-pkcs11-libs

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.15

fixed

bind-pkcs11-utils

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.15

fixed

bind-sdb

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.15

fixed

bind-sdb-chroot

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.15

fixed

bind-utils

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.15 fixed
Amazon Linux 2023	32:9.18.49-1.amzn2023.0.1 fixed

bind-utils-debuginfo

Amazon Linux 2023

32:9.18.49-1.amzn2023.0.1

fixed

Azure Linux Releases

Azure Package

Release

bind

Azure Linux 3.0

0:9.20.23-1.azl3

fixed

Common Weakness Enumeration

Vulnerability Media Exposure

[GERMAN] Internet Systems Consortium BIND: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um eine Speicherbeschädigung auszulösen oder einen Denial-of-Service-Zustand zu verursachen.
Published: 2026-05-20T22:00:00+00:00

References

https://downloads.isc.org/isc/bind9/9.18.49

https://downloads.isc.org/isc/bind9/9.20.23

https://downloads.isc.org/isc/bind9/9.21.22

https://kb.isc.org/docs/cve-2026-5946

https://access.redhat.com/errata/RHSA-2026:20334

https://access.redhat.com/errata/RHSA-2026:23360

https://access.redhat.com/errata/RHSA-2026:24338

https://access.redhat.com/errata/RHSA-2026:24339

https://access.redhat.com/errata/RHSA-2026:24367

https://access.redhat.com/errata/RHSA-2026:24368

https://access.redhat.com/errata/RHSA-2026:55441

https://access.redhat.com/security/cve/CVE-2026-5946

https://bugzilla.redhat.com/show_bug.cgi?id=2479771

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5946.json