ISC has disclosed four vulnerabilities in BIND 9 (CVE-2026-19630, CVE-2026-94300, CVE-2026-96888, CVE-2026-97313)

Posted by Andoni Duarte Pintado on Oct 21 On 21 October 2026, Internet Systems Consortium disclosed four vulnerabilities affecting our BIND 9 software: - CVE-2026-19630: Amplified resource exhaustion in inbound message processing https://kb.isc.org/docs/cve-2026-19630 - CVE-2026-94300: Concurrent GSS-TSIG messages corrupt memory https://kb.isc.org/docs/cve-2026-94300 - CVE-2026-96888: Named may terminate unexpectedly when a redirect zone is used with strict QNAME...

Published 21-Oct-2026 17:00 UTC · First seen 21-Oct-2026 16:59 UTC

Sources

• Open Source Security · 21-Oct-2026