VulnSocial

CVE-2026-97313

LOWCVSS 7.5 · HIGH

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may exit with an assertion failure, resulting in a denial of service. To be vulnerable, the BIND server must allow recursive queries and have at least two RPZ zones configured: one with the default setting of "recursive-only yes", and the other with "recursive-only no". This issue affects BIND 9 versions 9.16.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-617

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse2 posts
  • 日本レジストリサービス（JPRS）@JPRS_official

    （緊急）BIND 9.xの脆弱性（DNSサービスの停止）について（CVE-2026-97313） - RPZを該当する設定で利用している場合のみ対象、バージョンアップを強く推奨 - https://jprs.jp/tech/security/2026-10-22-bind9-cve-2026-97313.html

    03323866.6K
    1.6K followersView on X
  • Kazuki Omo@omokazuki

    BIND 9の脆弱性(High: CVE-2026-19630, CVE-2026-94300, CVE-2026-96888, CVE-2026-97313)と修正版(9.20.30, 9.21.27)リリース #sios_tech #security #vulnerability #セキュリティ #脆弱性 #dns #bind https://security.sios.jp/vulnerability/bind9-security-vulnerability-20261022/

    00000398
    376 followersView on X

Explore more

Back to dashboard