Critical Denial of Service Vulnerability in BIND Package
Summary
RLSA-2026:8312: Important: bind security update. Affects bind versions < 2:9.18.33-10.el10_1.3. Fixed in 2:9.18.33-10.el10_1.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Berkeley Internet Name Domain (BIND) is a widely used implementation of the Domain Name System (DNS) protocols. It includes a DNS server (named), a resolver library for applications interfacing with DNS, and various tools for verifying DNS server operations. BIND is critical for internet functionality, handling domain name resolution and ensuring reliable DNS services. However, it is susceptible to security vulnerabilities that can compromise its integrity and availability.
Vulnerability Detail
The vulnerability identified as CVE-2026-1519 allows for a Denial of Service (DoS) attack through maliciously crafted DNSSEC-validated zones. An attacker can exploit this vulnerability to disrupt the normal operation of the BIND server, potentially leading to service outages and impacting users relying on DNS services. The vulnerability arises from improper handling of specific DNSSEC data, which can cause the server to crash or become unresponsive.
How To Fix
Minimum fixed version
2:9.18.33-10.el10_1.3
This is the first release that contains the fix.
sudo dnf update bindTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users may consider disabling DNSSEC validation if it is not critical for their operations. However, this is not a recommended long-term solution as it may expose the system to other security risks.
Conclusion
The BIND package is critical for DNS operations, but it is vulnerable to a Denial of Service attack as identified in CVE-2026-1519. Users are strongly advised to update to the latest patched version to mitigate this risk. Monitoring tools like Vulert can assist in identifying such vulnerabilities in real-time.
See every vulnerability recorded for bind →
FAQ
CVE-2026-1519 is a security vulnerability in the BIND package that allows for Denial of Service attacks via malicious DNSSEC-validated zones.
You can check your BIND version using the command 'named -v' and compare it with the patched version 2:9.18.33-10.el10_1.3.
Failure to address this vulnerability may lead to service outages, affecting users' ability to resolve domain names and access internet services.
Yes, Vulert can monitor and alert for open-source vulnerabilities in your software using just a manifest file like package-lock.json.
You can use the Vulert playground at Vulert Scanner to check for vulnerabilities in your application without requiring an account.
Related vulnerabilities
Recent vulnerabilities recorded for bind.
