CVE-2026-19630

LOWCVSS 7.5 · HIGH

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during processing. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-407

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse3 posts

日本レジストリサービス（JPRS）@JPRS_official20h
（緊急）BIND 9.xの脆弱性（CPU・メモリの過剰な消費）について（CVE-2026-19630） - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-10-22-bind9-cve-2026-19630.html
044246118.7K
1.6K followersView on X
Radoslaw Gnat@radoslawgnat17h
@realcyberpanda But it is also DNS: https://kb.isc.org/docs/cve-2026-19630
0001028
611 followersView on X
Kazuki Omo@omokazuki18h
BIND 9の脆弱性(High: CVE-2026-19630, CVE-2026-94300, CVE-2026-96888, CVE-2026-97313)と修正版(9.20.30, 9.21.27)リリース #sios_tech #security #vulnerability #セキュリティ #脆弱性 #dns #bind https://security.sios.jp/vulnerability/bind9-security-vulnerability-20261022/
00000398
376 followersView on X

Explore more

Back to dashboard