CVE-2026-81563Patch

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A BIND resolver encountering an SVCB/HTTPS AliasMode record referencing 14 or more SVCB/HTTPS ServiceMode records may fail to properly deallocate internal resources. If this happens repeatedly, resource exhaustion will eventually prevent the resolver from performing new recursive lookups. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-401

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 5 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-09-17); latest day: 2
  • 5 total mentions across 3 days

Deep dive

Activity timeline5 mentions / 3d
01122Mentions · 2026-09-16: 1Mentions · 2026-09-17: 2Mentions · 2026-10-06: 2Patch / Workaround · 2026-09-17: 1Patch / Workaround · 2026-10-06: 2Technical Details · 2026-09-17: 109-1609-1710-06
Signal classification2 categories
Patch
360.0%
General
240.0%
Referenced assets17 URLs
Classification over time
DateTotalLabels
2026-09-161
General1
2026-09-172
General1Patch1
2026-10-062
Patch2
Full discourse5 posts
  • Yasuhiro Morishita@OrangeMorishita
    General

    【自分用メモ】今月は14件。High7件。 https://kb.isc.org/docs/cve-2026-19033 https://kb.isc.org/docs/cve-2026-19662 https://kb.isc.org/docs/cve-2026-19666 https://kb.isc.org/docs/cve-2026-19667 https://kb.isc.org/docs/cve-2026-19668 https://kb.isc.org/docs/cve-2026-19941 https://kb.isc.org/docs/cve-2026-75029 https://kb.isc.org/docs/cve-2026-76163 https://kb.isc.org/docs/cve-2026-77119 https://kb.isc.org/docs/cve-2026-77692 https://kb.isc.org/docs/cve-2026-78301 https://kb.isc.org/docs/cve-2026-80274 https://kb.isc.org/docs/cve-2026-81563 https://kb.isc.org/docs/cve-2026-81736

    Post summary

    Text is a personal memo listing 14 CVE identifiers with links to ISC KB documentation, containing no exploit details, patches, or technical vulnerability information.

    032821.6K
    4.6K followersView on X
  • 日本レジストリサービス(JPRS)@JPRS_official
    Patch

    (緊急)BIND 9.xの脆弱性(メモリ不足の発生)について(CVE-2026-81563) - バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-09-17-bind9-vuln-svcbhttps.html

    Post summary

    The text is a Japanese-language security advisory for BIND 9.x vulnerability CVE-2026-81563, describing a memory shortage issue and strongly recommending a version upgrade. No PoC, exploit, or active exploitation details are provided.

    01050447
    1.3K followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:75578 - Important: bind9.18 security update [RHEL9] https://access.redhat.com/errata/RHSA-2026:75578 Security Fix(es): - CVE-2026-81736 - CVE-2026-19667 - CVE-2026-81563 - CVE-2026-80274 - CVE-2026-19666

    Post summary

    The text is a Red Hat security advisory announcing security updates for bind9.18 on RHEL9 that address five CVEs, with no indication of PoCs, exploits, active exploitation, or technical vulnerability details.

    1000053
    118 followersView on X
  • まこぴ@makopicut
    Patch

    RHSA-2026:75577 - Important: bind security update [RHEL10] https://access.redhat.com/errata/RHSA-2026:75577 Security Fix(es): - CVE-2026-81736 - CVE-2026-19667 - CVE-2026-81563 - CVE-2026-80274 - CVE-2026-19666

    Post summary

    Red Hat published a BIND security update (RHSA-2026:75577) listing multiple CVE fixes; no PoC, exploit, or active exploitation details are provided.

    1000087
    118 followersView on X
  • Yu F@fj_twt
    General

    🤮 cve-2026-19033 cve-2026-19662 cve-2026-19666 cve-2026-19667 cve-2026-19668 cve-2026-19941 cve-2026-75029 cve-2026-76163 cve-2026-77119 cve-2026-77692 cve-2026-78301 cve-2026-80274 cve-2026-81563 cve-2026-81736

    Post summary

    The text is a brief list of CVE identifiers with no accompanying details, remediation advice, exploit code, or threat intelligence context.

    00010224
    1.6K followersView on X

Explore more