CVE-2026-75029

EUVD-2026-80786

16.09.2026, 15:17

In a query response, an attacker may send `named` multiple copies of a record that should only exist once (such as an SOA record). If the RDATA is the same on all the copies, the record is appended to the in-memory RDATA set, which can cause increased memory usage of the negative cache and possibly lead to other memory attack vectors.
This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

Amplification

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
isc	CNA	5.3 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 41.41%

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).

Vendor	Product	Version	Source
isc	bind	9.11.0 ≤ 𝑥 ≤ 9.18.50	CNA
isc	bind	9.20.0 ≤ 𝑥 ≤ 9.20.27	CNA
isc	bind	9.21.0 ≤ 𝑥 ≤ 9.21.25	CNA

Debian Releases

Debian Product

Codename

bind9

bookworm	vulnerable
bookworm (security)	1:9.18.49-1~deb12u3 fixed
forky	1:9.20.30-1 fixed
sid	1:9.20.30-1 fixed
trixie	vulnerable
trixie (security)	1:9.20.30-1~deb13u1 fixed

Ubuntu Releases

Ubuntu Product

Codename

bind9

bionic	Fixed 1:9.11.3+dfsg-1ubuntu1.19+esm6 released
focal	Fixed 1:9.18.30-0ubuntu0.20.04.2+esm3 released
jammy	Fixed 1:9.18.39-0ubuntu0.22.04.7 released
noble	Fixed 1:9.18.39-0ubuntu0.24.04.8 released
resolute	Fixed 1:9.20.24-1ubuntu0.4 released
trusty	Fixed 1:9.9.5.dfsg-3ubuntu0.19+esm15 released
xenial	Fixed 1:9.10.3.dfsg.P4-8ubuntu1.19+esm11 released

isc-dhcp

bionic	needs-triage
focal	not-affected
jammy	not-affected
noble	needs-triage
resolute	needs-triage
trusty	not-affected
xenial	not-affected

bind9-libs

focal	needs-triage
jammy	needs-triage
noble	dne
resolute	dne

openSUSE / SLES Releases

openSUSE Product

Release

bind

suse enterprise sap 12 SP5	9.11.22-3.77.1 fixed
suse enterprise sap 15 SP4	9.16.50-150400.5.70.1 fixed
suse enterprise sap 15 SP5	9.16.50-150500.8.46.1 fixed
suse enterprise sap 15 SP6	9.18.50-150600.3.35.1 fixed
suse enterprise sap 15 SP7	9.20.29-150700.3.32.2 fixed
suse enterprise server 12 SP5	9.11.22-3.77.1 fixed
suse enterprise server 15 SP4	9.16.50-150400.5.70.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.46.1 fixed
suse enterprise server 15 SP6	9.18.50-150600.3.35.1 fixed
suse enterprise server 15 SP7	9.20.29-150700.3.32.2 fixed

bind-chrootenv

suse enterprise sap 12 SP5	9.11.22-3.77.1 fixed
suse enterprise server 12 SP5	9.11.22-3.77.1 fixed

bind-devel

suse enterprise sap 12 SP5	9.11.22-3.77.1 fixed
suse enterprise server 12 SP5	9.11.22-3.77.1 fixed

bind-doc

suse enterprise sap 12 SP5	9.11.22-3.77.1 fixed
suse enterprise sap 15 SP4	9.16.50-150400.5.70.1 fixed
suse enterprise sap 15 SP5	9.16.50-150500.8.46.1 fixed
suse enterprise sap 15 SP6	9.18.50-150600.3.35.1 fixed
suse enterprise sap 15 SP7	9.20.29-150700.3.32.2 fixed
suse enterprise server 12 SP5	9.11.22-3.77.1 fixed
suse enterprise server 15 SP4	9.16.50-150400.5.70.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.46.1 fixed
suse enterprise server 15 SP6	9.18.50-150600.3.35.1 fixed
suse enterprise server 15 SP7	9.20.29-150700.3.32.2 fixed

bind-utils

suse enterprise sap 12 SP5	9.11.22-3.77.1 fixed
suse enterprise sap 15 SP4	9.16.50-150400.5.70.1 fixed
suse enterprise sap 15 SP5	9.16.50-150500.8.46.1 fixed
suse enterprise sap 15 SP6	9.18.50-150600.3.35.1 fixed
suse enterprise server 12 SP5	9.11.22-3.77.1 fixed
suse enterprise server 15 SP4	9.16.50-150400.5.70.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.46.1 fixed
suse enterprise server 15 SP6	9.18.50-150600.3.35.1 fixed

libbind9-161

suse enterprise sap 12 SP5	9.11.22-3.77.1 fixed
suse enterprise server 12 SP5	9.11.22-3.77.1 fixed

libdns1110

suse enterprise sap 12 SP5	9.11.22-3.77.1 fixed
suse enterprise server 12 SP5	9.11.22-3.77.1 fixed

libirs161

suse enterprise sap 12 SP5	9.11.22-3.77.1 fixed
suse enterprise server 12 SP5	9.11.22-3.77.1 fixed

libisc1107

suse enterprise sap 12 SP5	9.11.22-3.77.1 fixed
suse enterprise server 12 SP5	9.11.22-3.77.1 fixed

libisc1107-32bit

suse enterprise sap 12 SP5	9.11.22-3.77.1 fixed
suse enterprise server 12 SP5	9.11.22-3.77.1 fixed

libisccc161

suse enterprise sap 12 SP5	9.11.22-3.77.1 fixed
suse enterprise server 12 SP5	9.11.22-3.77.1 fixed

libisccfg163

suse enterprise sap 12 SP5	9.11.22-3.77.1 fixed
suse enterprise server 12 SP5	9.11.22-3.77.1 fixed

liblwres161

suse enterprise sap 12 SP5	9.11.22-3.77.1 fixed
suse enterprise server 12 SP5	9.11.22-3.77.1 fixed

python-bind

suse enterprise sap 12 SP5	9.11.22-3.77.1 fixed
suse enterprise server 12 SP5	9.11.22-3.77.1 fixed

python3-bind

suse enterprise sap 15 SP4	9.16.50-150400.5.70.1 fixed
suse enterprise sap 15 SP5	9.16.50-150500.8.46.1 fixed
suse enterprise server 15 SP4	9.16.50-150400.5.70.1 fixed
suse enterprise server 15 SP5	9.16.50-150500.8.46.1 fixed

Amazon Linux Releases

Amazon Package

Release

bind

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.18 fixed
Amazon Linux 2023	32:9.18.50-1.amzn2023.0.3 fixed

bind-chroot

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.18 fixed
Amazon Linux 2023	32:9.18.50-1.amzn2023.0.3 fixed

bind-debuginfo

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.18 fixed
Amazon Linux 2023	32:9.18.50-1.amzn2023.0.3 fixed

bind-debugsource

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.3

fixed

bind-devel

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.18 fixed
Amazon Linux 2023	32:9.18.50-1.amzn2023.0.3 fixed

bind-dnssec-utils

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.3

fixed

bind-dnssec-utils-debuginfo

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.3

fixed

bind-doc

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.3

fixed

bind-export-devel

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.18

fixed

bind-export-libs

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.18

fixed

bind-libs

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.18 fixed
Amazon Linux 2023	32:9.18.50-1.amzn2023.0.3 fixed

bind-libs-debuginfo

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.3

fixed

bind-libs-lite

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.18

fixed

bind-license

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.18 fixed
Amazon Linux 2023	32:9.18.50-1.amzn2023.0.3 fixed

bind-lite-devel

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.18

fixed

bind-pkcs11

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.18

fixed

bind-pkcs11-devel

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.18

fixed

bind-pkcs11-libs

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.18

fixed

bind-pkcs11-utils

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.18

fixed

bind-sdb

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.18

fixed

bind-sdb-chroot

Amazon Linux 2

32:9.11.4-26.P2.amzn2.13.18

fixed

bind-utils

Amazon Linux 2	32:9.11.4-26.P2.amzn2.13.18 fixed
Amazon Linux 2023	32:9.18.50-1.amzn2023.0.3 fixed

bind-utils-debuginfo

Amazon Linux 2023

32:9.18.50-1.amzn2023.0.3

fixed

Azure Linux Releases

Azure Package

Release

bind

Azure Linux 3.0

0:9.20.30-1.azl3

fixed

Common Weakness Enumeration

CWE-405 - Asymmetric Resource Consumption (Amplification)
Software that does not appropriately monitor or control resource consumption can lead to adverse system performance.

Vulnerability Media Exposure

[GERMAN] Internet Systems Consortium BIND: Mehrere Schwachstellen
Ein entfernter Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um Daten zu manipulieren, Sicherheitsmaßnahmen zu umgehen oder Denial-of-Service-Zustände herbeizuführen.
Published: 2026-09-16T22:00:00+00:00

References

https://downloads.isc.org/isc/bind9/9.20.29

https://downloads.isc.org/isc/bind9/9.21.26

https://kb.isc.org/docs/cve-2026-75029