Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A query but delays the DNAME response and later responds negatively, `named` may quit unexpectedly. Or, if a client queries for a CNAME and A record for the same name to the resolver, and the authoritative server responds positively to the A query but delays the CNAME response and later responds with a self-referential CNAME, the same failure may occur. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-22 | 4 | Disclosure1General2Patch1 |
| 2026-07-23 | 2 | Patch2 |
| 2026-08-03 | 1 | General1 |
【注意喚起】（緊急）BIND 9.xの脆弱性（DNSサービスの停止）について（CVE-2026-12617） - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-07-23-bind9-vuln-dnameandcname.html
Post summary
JPRS issues a warning about CVE-2026-12617 that causes DNS service stoppage in BIND 9.x and strongly recommends upgrading the software.
【自分用メモ】BIND 9の脆弱性(High: CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, Medium: CVE-2026-10723, CVE-2026-10822)と修正バージョン(9.20.26, 9.21.24) https://security.sios.jp/vulnerability/bind9-security-vulnerability-20260723/
Post summary
A memo summarizing BIND 9 CVEs and noting the available patch versions 9.20.26 and 9.21.24.
( ꒪⌓꒪)…灼熱の特大号 New BIND 9 releases: 9.20.26, 9.21.24 https://lists.isc.org/pipermail/bind-announce/2026-July/001299.html https://kb.isc.org/docs/cve-2026-10723 https://kb.isc.org/docs/cve-2026-10822 https://kb.isc.org/docs/cve-2026-11331 https://kb.isc.org/docs/cve-2026-11605 https://kb.isc.org/docs/cve-2026-11622 https://kb.isc.org/docs/cve-2026-11721 https://kb.isc.org/docs/cve-2026-12617 https://kb.isc.org/docs/cve-2026-13204 https://kb.isc.org/docs/cve-2026-13321
Post summary
The tweet announces new BIND 9 releases that patch multiple CVEs, providing links to ISC KB pages for additional information.
BIND 9の脆弱性(High: CVE-2026-11331, CVE-2026-11605, CVE-2026-11622, CVE-2026-11721, CVE-2026-12617, CVE-2026-13204, CVE-2026-13321, Medium: CVE-2026-10723, CVE-2026-10822) #sios_tech #security #vulnerability #セキュリティ #脆弱性 #dns #bind https://security.sios.jp/vulnerability/bind9-security-vulnerability-20260723/
Post summary
A notice lists several newly disclosed high and medium severity CVEs affecting BIND 9, with no indication of PoC, exploitation, patch details, or false‑positive claims.
⚠️ Vulnerabilidades en productos ISC ❗ CVE-2026-13321 ❗ CVE-2026-13204 ❗ CVE-2026-12617 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-isc-2/ https://t.co/F9ZBhRX5OR
Post summary
The tweet lists three CVEs affecting ISC products and directs readers to a link for further details, but it does not provide technical specifics, PoC, exploitation status, or patch information.
🚨*CVE* CVE-2026-12617 The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a cl… https://www.cve.org/CVERecord?id=CVE-2026-12617 ----- Traducción: CVE-2026-12617 El … http://infoflow.cloud`
Post summary
The tweet reports CVE-2026-12617 as an unexpected program termination issue triggered by specific DNS query responses, but it does not include evidence of exploitation, a PoC, or mitigation guidance.
CVE-2026-12617 The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a cl… https://www.cve.org/CVERecord?id=CVE-2026-12617
Post summary
The text provides a brief technical description of CVE-2026-12617, noting unexpected program termination triggered by specific DNS query responses, with no additional evidence of PoC, exploit, or mitigation.