VulnSocial

CVE-2026-19667Patch

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-197

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 12 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 7 signals
  • Technical details provided in 4 signals
  • General: 3 classified signals
  • Disclosure: 2 classified signals
  • Peaked 3d ago at 5 mentions (2026-09-16); latest day: 2
  • 12 total mentions across 4 days

Deep dive

Activity timeline12 mentions / 4d
01345Mentions · 2026-09-16: 5Mentions · 2026-09-17: 2Mentions · 2026-10-06: 3Mentions · 2026-10-08: 2Patch / Workaround · 2026-09-16: 1Patch / Workaround · 2026-09-17: 1Patch / Workaround · 2026-10-06: 3Patch / Workaround · 2026-10-08: 2Technical Details · 2026-09-16: 3Technical Details · 2026-09-17: 109-1609-1710-0610-08
Signal classification3 categories
Patch
758.3%
General
325.0%
Disclosure
216.7%
Referenced assets21 URLs
By indicator
Classification over time
DateTotalLabels
2026-09-165
Disclosure2General2Patch1
2026-09-172
General1Patch1
2026-10-063
Patch3
2026-10-082
Patch2
Full discourse12 posts
  • 新月@fubukiyokiyoki
    Disclosure

    インターネットを破壊しました BIND 9に2件の脆弱性を報告し、CVE-2026-19666とCVE-2026-19667が採番されました どちらもリゾルバのDoSで CVE-2026-19666はdns64有効時 CVE-2026-19667はデフォルトで影響します CVSSはどちらも7.5(High)です https://kb.isc.org/docs/cve-2026-19666 https://kb.isc.org/docs/cve-2026-19667

    Post summary

    The text announces two new BIND 9 resolver DoS vulnerabilities (CVE-2026-19666, CVE-2026-19667) with CVSS 7.5, providing technical context but no patch, PoC, or exploit details.

    24122164817.0K
    3.3K followersView on X
  • Yasuhiro Morishita@OrangeMorishita
    General

    【自分用メモ】今月は14件。High7件。 https://kb.isc.org/docs/cve-2026-19033 https://kb.isc.org/docs/cve-2026-19662 https://kb.isc.org/docs/cve-2026-19666 https://kb.isc.org/docs/cve-2026-19667 https://kb.isc.org/docs/cve-2026-19668 https://kb.isc.org/docs/cve-2026-19941 https://kb.isc.org/docs/cve-2026-75029 https://kb.isc.org/docs/cve-2026-76163 https://kb.isc.org/docs/cve-2026-77119 https://kb.isc.org/docs/cve-2026-77692 https://kb.isc.org/docs/cve-2026-78301 https://kb.isc.org/docs/cve-2026-80274 https://kb.isc.org/docs/cve-2026-81563 https://kb.isc.org/docs/cve-2026-81736

    Post summary

    A personal memo listing 14 CVEs with links to ISC knowledge base entries, without any details on PoC, exploits, patches, or active exploitation.

    032821.6K
    4.6K followersView on X
  • Rıdvan Yağlı@ridvanyagli
    Patch

    🔴 BIND 9'da iki yeni DoS açığı keşfedildi: CVE-2026-19666 ve CVE-2026-19667. CVE-2026-19666, DNS64 etkin resolver'ları; CVE-2026-19667 ise varsayılan yapılandırmadaki resolver'ları etkileyerek uzaktan named sürecinin çökmesine neden olabiliyor. Public recursive DNS sunucuları başta olmak üzere BIND 9 sistemlerinin güncel desteklenen sürüme yükseltilmesi gerekiyor.

    Post summary

    The tweet announces two new BIND 9 denial‑of‑service vulnerabilities (CVE‑2026‑19666 and CVE‑2026‑19667) that can cause remote crashes and urges upgrading BIND 9 systems to the latest supported version.

    02052776
    2.5K followersView on X
  • 日本レジストリサービス（JPRS）@JPRS_official
    Patch

    （緊急）BIND 9.xの脆弱性（DNSサービスの停止）について（CVE-2026-19667） - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-09-17-bind9-vuln-65536.html

    Post summary

    The text announces CVE-2026-19667, a BIND 9.x vulnerability causing DNS service denial, and strongly urges a version upgrade as remediation. It provides basic technical details but no PoC, exploit tool, or evidence of active exploitation.

    01051445
    1.3K followersView on X
  • hands_of_cat@hands_of_cat
    General

    cve-2026-19667は、NVDのDBにはまだ登録されていない。CVEを採番する組織が番号を割り当ててCVEを公開する。①その後NVDのDBに登録される。②登録されたCVEをNVDが算出する。①と②がどうしても遅延する。 https://nvd.nist.gov/vuln/detail/cve-2026-19667

    Post summary

    The tweet reports that CVE‑2026‑19667 has not yet been registered in the NVD database and describes the delayed assignment and registration process, without any technical details, exploit information, or remediation guidance.

    10011247
    339 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:79113 - Important: bind9.16 security, bug fix, and enhancement update [RHEL8] https://access.redhat.com/errata/RHSA-2026:79113 Security Fix(es): - CVE-2026-19667 - CVE-2026-80274 - CVE-2026-19666 Bug Fix(es) and Enhancement(s): - bind 9.16 crash with SIGSEGV (JIRA:RHEL-273294)

    Post summary

    The text announces a Red Hat bind9 security and bug-fix update covering three CVEs. It provides no PoC, exploit details, or report of active exploitation.

    1000043
    118 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:75767 - Important: bind security update [RHEL9] https://access.redhat.com/errata/RHSA-2026:75767 Security Fix(es): - CVE-2026-19667 - CVE-2026-80274 - CVE-2026-19666

    Post summary

    A Red Hat security advisory (RHSA-2026:75767) announces a BIND security update for RHEL9 that patches three CVEs.

    1000041
    118 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:75578 - Important: bind9.18 security update [RHEL9] https://access.redhat.com/errata/RHSA-2026:75578 Security Fix(es): - CVE-2026-81736 - CVE-2026-19667 - CVE-2026-81563 - CVE-2026-80274 - CVE-2026-19666

    Post summary

    The text is a Red Hat Security Advisory (RHSA-2026:75578) announcing security updates for bind9.18 on RHEL9 that address five CVEs. It serves primarily as a vendor advisory/remediation notice without providing exploit code, exploitation evidence, or technical vulnerability details.

    1000053
    118 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:75577 - Important: bind security update [RHEL10] https://access.redhat.com/errata/RHSA-2026:75577 Security Fix(es): - CVE-2026-81736 - CVE-2026-19667 - CVE-2026-81563 - CVE-2026-80274 - CVE-2026-19666

    Post summary

    Red Hat issued a security update (RHSA-2026:75577) to address five CVEs (CVE-2026-81736, CVE-2026-19667, CVE-2026-81563, CVE-2026-80274, CVE-2026-19666) in BIND for RHEL10, urging immediate application of the patch to remediate the vulnerabilities.

    1000087
    118 followersView on X
  • Yu F@fj_twt
    General

    🤮 cve-2026-19033 cve-2026-19662 cve-2026-19666 cve-2026-19667 cve-2026-19668 cve-2026-19941 cve-2026-75029 cve-2026-76163 cve-2026-77119 cve-2026-77692 cve-2026-78301 cve-2026-80274 cve-2026-81563 cve-2026-81736

    Post summary

    The text lists a series of CVE identifiers without providing context, technical details, or indicators of exploitation, patches, or PoCs, categorizing it as a general mention.

    00010224
    1.6K followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:79162 - Important: bind security update [RHEL8] https://access.redhat.com/errata/RHSA-2026:79162 Security Fix(es): - CVE-2026-19667 - CVE-2026-80274 - CVE-2026-19666

    Post summary

    The text announces a Red Hat security update for bind and lists three CVEs. It provides no PoC, exploit details, or active exploitation claims.

    0000038
    118 followersView on X
  • ねこさん⚡(ΦωΦ)@catnap707
    Disclosure

    CVE-2026-19667: Remote assertion failure via 16-bit length truncation in `dns_ncache_add()` https://kb.isc.org/docs/cve-2026-19667 "BIND Supported Preview Edition 9.11.3-S1 -> 9.18.50-S1 9.20.9-S1 -> 9.20.27-S1 Severity: High Exploitable: Remotely"

    Post summary

    The post discloses a high-severity, remotely exploitable assertion failure in BIND Supported Preview Edition, providing technical details about the flaw but no patch, exploit, or active exploitation information.

    00000140
    3.5K followersView on X

Explore more

Back to dashboard