Critical Remote Denial of Service Vulnerability in BIND Package
Summary
RLSA-2026:75577: Important: bind security update. Affects bind versions < 2:9.18.33-15.el10_2.12. Fixed in 2:9.18.33-15.el10_2.12. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Berkeley Internet Name Domain (BIND) is a widely used implementation of the Domain Name System (DNS) protocols. It includes a DNS server (named), a resolver library for applications interfacing with DNS, and tools for verifying the DNS server's operation. BIND is critical for the functioning of internet services, making its security paramount.
Vulnerability Detail
The vulnerability in BIND arises from multiple denial of service (DoS) issues, including remote exploitation via cached SVCB/HTTPS AliasMode records and crafted DNSSEC replies. Attackers can exploit these vulnerabilities to exhaust resources or crash the DNS server, leading to service unavailability. The vulnerabilities are tracked under CVE-2026-19666, CVE-2026-19667, CVE-2026-80274, CVE-2026-81563, and CVE-2026-81736, with a CVSS score of 7.5 indicating a high severity.
How To Fix
Minimum fixed version
2:9.18.33-15.el10_2.12
This is the first release that contains the fix.
sudo dnf update bindTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not possible, consider implementing network-level protections such as rate limiting or firewalls to mitigate the impact of potential attacks targeting these vulnerabilities.
Conclusion
The BIND package has critical vulnerabilities that can lead to denial of service attacks. It is essential to update to the latest patched version to safeguard your systems. Regular monitoring and updates are crucial for maintaining security.
See every vulnerability recorded for bind →
FAQ
BIND is an implementation of the DNS protocols, providing essential services for domain name resolution on the internet.
Exploitation of this vulnerability can lead to denial of service, causing the DNS server to become unresponsive and affecting all services relying on it.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score of this vulnerability is 7.5, indicating a high severity level.
It is recommended to regularly check for updates and apply them promptly to ensure your system is protected against known vulnerabilities.
References
Related vulnerabilities
Recent vulnerabilities recorded for bind.
