CVE-2026-76163
EUVD-2026-8077616.09.2026, 15:17
If BIND is loaded with a "`named.conf`" file that contains no global "`options`" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| isc | bind | 9.20.0 ≤ 𝑥 ≤ 9.20.27 | CNA |
| isc | bind | 9.21.0 ≤ 𝑥 ≤ 9.21.25 | CNA |
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| bind9 |
| ||||||||||||||||
| isc-dhcp |
| ||||||||||||||||
| bind9-libs |
|
openSUSE / SLES Releases
Common Weakness Enumeration
Vulnerability Media Exposure