Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key (KEY, DNSKEY, etc.). That key must specify a PRIVATEDNS algorithm (253), and in the algorithm identifier, improperly give a length longer than the actual identifier data. The invalid identifier will be stored. If BIND later needs to render that record to text, it will use the invalid length during processing, leading to a consistency check failing. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-22 | 4 | Disclosure3Patch1 |
| 2026-07-23 | 2 | Patch2 |
【注意喚起】BIND 9.xの脆弱性（DNSサービスの停止）について（CVE-2026-10822） - フルリゾルバー（キャッシュDNSサーバー）／権威DNSサーバーの双方が対象、バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-07-23-bind9-vuln-privatedns.html
Post summary
The post warns that CVE-2026-10822 can cause DNS service disruptions on BIND 9.x resolvers and authoritative servers, and strongly urges users to apply upgrades.
【自分用メモ】BIND 9の脆弱性(High: CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, Medium: CVE-2026-10723, CVE-2026-10822)と修正バージョン(9.20.26, 9.21.24) https://security.sios.jp/vulnerability/bind9-security-vulnerability-20260723/
Post summary
The memo lists BIND 9 CVEs with their severity ratings and provides the patched releases (9.20.26 and 9.21.24), indicating that security updates are available.
( ꒪⌓꒪)…灼熱の特大号 New BIND 9 releases: 9.20.26, 9.21.24 https://lists.isc.org/pipermail/bind-announce/2026-July/001299.html https://kb.isc.org/docs/cve-2026-10723 https://kb.isc.org/docs/cve-2026-10822 https://kb.isc.org/docs/cve-2026-11331 https://kb.isc.org/docs/cve-2026-11605 https://kb.isc.org/docs/cve-2026-11622 https://kb.isc.org/docs/cve-2026-11721 https://kb.isc.org/docs/cve-2026-12617 https://kb.isc.org/docs/cve-2026-13204 https://kb.isc.org/docs/cve-2026-13321
Post summary
ISC released new BIND 9 versions and supplied vendor advisory links, indicating that patches for multiple CVEs are available.
BIND 9の脆弱性(High: CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, Medium: CVE-2026-10723, CVE-2026-10822) #sios_tech #security #vulnerability #セキュリティ #脆弱性 #dns #bind https://security.sios.jp/vulnerability/bind9-security-vulnerability-20260723/
Post summary
The post announces a set of BIND 9 CVEs, categorizing them as High and Medium severity, and links to a Japanese security site for further information.
🚨*CVE* CVE-2026-10822 If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to… https://www.cve.org/CVERecord?id=CVE-2026-10822 ----- Traducción: CVE-2026-10822 Si … http://infoflow.cloud`
Post summary
The tweet references CVE-2026-10822, noting that BIND may accept invalid DNS data leading to a crash, but provides no PoC, exploit code, or patch information—just a concise technical disclosure.
CVE-2026-10822 If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to… https://www.cve.org/CVERecord?id=CVE-2026-10822
Post summary
CVE‑2026‑10822 describes a vulnerability where BIND accepts a malformed DNS record and may abort/exit. No PoC, exploit, patch, or active exploitation is mentioned.