Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the limit configured in the `max-cache-size` parameter. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-22 | 4 | Disclosure2General1Patch1 |
| 2026-07-23 | 2 | Patch2 |
| 2026-08-14 | 3 | Patch3 |
| 2026-08-17 | 2 | Patch2 |
【注意喚起】（緊急）BIND 9.xの脆弱性（メモリ不足の発生）について（CVE-2026-11622） - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-07-23-bind9-vuln-randomsubdomain.html
Post summary
An urgent advisory warns about CVE‑2026‑11622 in BIND 9.x causing memory exhaustion and strongly recommends applying a version update.
【自分用メモ】BIND 9の脆弱性(High: CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, Medium: CVE-2026-10723, CVE-2026-10822)と修正バージョン(9.20.26, 9.21.24) https://security.sios.jp/vulnerability/bind9-security-vulnerability-20260723/
Post summary
The memo documents multiple high- and medium‑severity BIND 9 CVEs, specifies the patched versions, and links to a security advisory.
( ꒪⌓꒪)…灼熱の特大号 New BIND 9 releases: 9.20.26, 9.21.24 https://lists.isc.org/pipermail/bind-announce/2026-July/001299.html https://kb.isc.org/docs/cve-2026-10723 https://kb.isc.org/docs/cve-2026-10822 https://kb.isc.org/docs/cve-2026-11331 https://kb.isc.org/docs/cve-2026-11605 https://kb.isc.org/docs/cve-2026-11622 https://kb.isc.org/docs/cve-2026-11721 https://kb.isc.org/docs/cve-2026-12617 https://kb.isc.org/docs/cve-2026-13204 https://kb.isc.org/docs/cve-2026-13321
Post summary
The post announces new BIND 9 releases and links to ISC vendor advisory pages for several CVEs, signaling that patches are available for those vulnerabilities.
BIND 9の脆弱性(High: CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, Medium: CVE-2026-10723, CVE-2026-10822) #sios_tech #security #vulnerability #セキュリティ #脆弱性 #dns #bind https://security.sios.jp/vulnerability/bind9-security-vulnerability-20260723/
Post summary
The tweet enumerates several BIND 9 CVEs with severity levels and links to a detailed article.
RHSA-2026:54509 - bind9.16 security update (RHEL8) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:54509
Post summary
Red Hat released a security update for bind9.16 on RHEL8, addressing multiple CVEs with available patches.
CVE-2026-11622 A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able … https://www.cve.org/CVERecord?id=CVE-2026-11622
Post summary
The text describes a memory exhaustion flaw in DNSSEC‑validating resolvers when subjected to random subdomain attacks; no PoC, exploit, or patch information is provided.
RHSA-2026:54654 - bind security update (RHEL8) - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:54654
Post summary
Red Hat publishes a security update for bind on RHEL8, addressing several CVEs and providing patches.
RHSA-2026:54510 - bind security update (RHEL9) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:54510
Post summary
Red Hat has issued RHSA‑2026:54510 for RHEL9, providing security fixes for six CVEs; no PoC, exploit, or active exploitation is noted.
RHSA-2026:55437 - bind security update (RHEL10) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:55437
Post summary
Red Hat’s RHSA‑2026:55437 releases bind patches for RHEL10, addressing six CVEs without details on exploitation or vulnerability mechanics.
RHSA-2026:55442 - bind9.18 security update (RHEL9) Security Fix(es): - CVE-2026-11331 - CVE-2026-13321 - CVE-2026-11622 - CVE-2026-11721 - CVE-2026-13204 - CVE-2026-10723 https://access.redhat.com/errata/RHSA-2026:55442
Post summary
Red Hat issued a bind9.18 security update for RHEL9 that fixes several CVEs, as noted in the advisory. No technical or exploit details are included beyond the CVE identifiers.
🚨*CVE* CVE-2026-11622 A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able … https://www.cve.org/CVERecord?id=CVE-2026-11622 ----- Traducción: CVE-2026-11622 Un … http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑11622, detailing a DNSSEC resolver vulnerability that may lead to runaway memory usage under a random subdomain attack.