VulertSecurity VulertSecurity

Vulnerability Database · Debian · bind9 · Version

bind9 1:9.21.18-1

1:9.21.18-1 is affected by 18 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 7 Medium 7 Low 0 Unrated 4

All bind9 versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

bind9 1:9.21.18-1 vulnerabilities

18 vulnerabilities cover bind9 1:9.21.18-1. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Critical Program Exit Vulnerability in BIND 9: CVE-2026-80274 7.5 high No fix published 16 Sep 2026
Critical Assertion Failure in BIND 9 Due to Missing Global Options Block 7.5 high No fix published 16 Sep 2026
Critical Vulnerability in BIND 9: Unexpected Exit Due to Malformed DNS64 Responses 7.5 high No fix published 16 Sep 2026
High CPU Consumption Vulnerability in BIND 9 due to SVCB/HTTPS AliasMode Records 7.5 high No fix published 16 Sep 2026
Resource Exhaustion Vulnerability in BIND 9 Resolver 7.5 high No fix published 16 Sep 2026
Critical Vulnerability in BIND 9: SIG(0) Record Handling Issue 7.5 high No fix published 16 Sep 2026
Critical Buffer Overflow Vulnerability in BIND 9 Leading to Service Abort 7.5 high No fix published 16 Sep 2026
Unauthorized Zone Transfer Vulnerability in BIND 9 6.5 medium No fix published 16 Sep 2026
BIND 9 Vulnerability: Insecure Delegation via NSEC3 Acceptance 5.9 medium No fix published 16 Sep 2026
BIND 9 Vulnerability: Inapplicable NSEC Record Acceptance 5.9 medium No fix published 16 Sep 2026
Critical Use-After-Free Vulnerability in BIND 9 Resolver 5.9 medium No fix published 16 Sep 2026
Critical Vulnerability in BIND9: Malformed Zone Handling Leads to Data Caching Risks 5.8 medium No fix published 16 Sep 2026
Memory Attack Vulnerability in BIND 9: Multiple Record Copies Issue 5.3 medium No fix published 16 Sep 2026
Resource Consumption Vulnerability in BIND 9: CVE-2026-19668 5.3 medium No fix published 16 Sep 2026
Memory Corruption Vulnerability in BIND 9 Due to GSS-TSIG Replay Attack N/A unrated No fix published 21 Oct 2026
Denial of Service Vulnerability in BIND 9 due to Recursive Query Misconfiguration N/A unrated No fix published 21 Oct 2026
Critical Assertion Failure in BIND 9 with Redirect Zone and QName Minimization N/A unrated No fix published 21 Oct 2026
BIND 9 CPU and Memory Consumption Vulnerability - CVE-2026-19630 N/A unrated No fix published 21 Oct 2026

Looking for another version, or everything Vulert holds for bind9?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About bind9 1:9.21.18-1

Is bind9 1:9.21.18-1 vulnerable?

Yes. 18 vulnerabilities in the Vulert database cover bind9 1:9.21.18-1: 0 critical, 7 high, 7 medium and 0 low, plus 4 not yet rated. Each entry above names the fixed version to move to.

How do I monitor bind9 for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the bind9 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.