Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Under certain conditions, `named` may crash when processing a correctly signed query containing a TKEY record. The affected code can only be reached if an incoming request has a valid transaction signature (TSIG) from a key declared in the `named` configuration. This issue affects BIND 9 versions 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, and 9.20.9-S1 through 9.20.20-S1. BIND 9 versions 9.18.0 through 9.18.46 and 9.18.11-S1 through 9.18.46-S1 are NOT affected.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-25 | 3 | General1Patch2 |
| 2026-03-26 | 2 | Disclosure1Patch1 |
| 2026-03-27 | 1 | General1 |
| 2026-03-28 | 1 | Patch1 |
【注意喚起】BIND 9.20.xの脆弱性（DNSサービスの停止）について（CVE-2026-3119） - フルリゾルバー（キャッシュDNSサーバー）／権威DNSサーバーの双方が対象、バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-03-26-bind9-vuln-tkey.html
Post summary
An advisory announcing CVE-2026-3119, a denial‑of‑service flaw in BIND 9.20.x that stops DNS services, and urging users to upgrade.
【自分用メモ】今回は4件。 CVE-2026-1519: Excessive NSEC3 iterations cause high CPU load during insecure delegation validation https://kb.isc.org/docs/cve-2026-1519 CVE-2026-3104: Memory leak in code preparing DNSSEC proofs of non-existence https://kb.isc.org/docs/cve-2026-3104 CVE-2026-3119: Authenticated query containing a TKEY record may cause named to terminate unexpectedly https://kb.isc.org/docs/cve-2026-3119 CVE-2026-3591: A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass https://kb.isc.org/docs/cve-2026-3591
Post summary
The memo lists four 2026 CVEs with concise technical notes and links to ISC knowledge‑base pages, indicating early disclosure of vulnerabilities.
SIOSセキュリティブログを更新しました。 BIND 9の脆弱性(High: CVE-2026-1519, CVE-2026-3104, Medium: CVE-2026-3119, CVE-2026-3591)と9.18.47, 9.20.21, 9.21.20のリリース #sios_tech #security #vulnerability #セキュリティ #脆弱性 #dns #bind https://security.sios.jp/vulnerability/bind-security-vulnerability-20260326/
Post summary
The blog post announces BIND 9 CVE vulnerabilities and provides the updated BIND 9 releases that contain patches for those issues.
NSEC3の負荷問題とかTKEYとか。 https://kb.isc.org/docs/cve-2026-1519 https://kb.isc.org/docs/cve-2026-3104 https://kb.isc.org/docs/cve-2026-3119 https://kb.isc.org/docs/cve-2026-3591
Post summary
The tweet lists four CVE reference links and briefly mentions DNSSEC-related issues (NSEC3 load and TKEY), but provides no specifics on exploitation, patches, or technical details.
CVEs fixed in BIND 9 CVE-2026-3119: Authenticated query containing a TKEY record may cause named to terminate unexpectedly CVE-2026-3591: A stack use-after-return flaw in SIG(0) handling code may enable ACL bypass
Post summary
BIND 9 is releasing a patch for CVE‑2026‑3119 and CVE‑2026‑3591, with concise descriptive details, but no proof‑of‑concept, exploit code, or evidence of current exploitation.
⚡ New CVE Alert: CVE-2026-3119 📊 Severity: 6.5 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-3119 #CVE-2026-3119 #CVE #Medium #CyberSecurity #InfoSec https://t.co/mu641Xq8U8
Post summary
A brief announcement of CVE-2026-3119 with severity and general product impact, but no technical, exploit, or remediation details.
IT関連サイト記事が更新されました！記事はこちらから⇒ BIND 9の脆弱性(High: CVE-2026-1519, CVE-2026-3104, Medium: CVE-2026-3119, CVE-2026-3591)と9.18.47, 9.20.21, 9.21.20のリリース https://security.sios.jp/vulnerability/bind-security-vulnerability-20260326/
Post summary
The article announces BIND 9 update releases that address several CVEs, providing patch information but no exploit or detailed technical content.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | isc | bind | - | - | - |