Critical Security Advisory: bind9.16 Vulnerability Update
Summary
RHSA-2026:79113: Red Hat Security Advisory: bind9.16 security, bug fix, and enhancement update. Affects bind9.16 versions < 32:9.16.23-0.22.el8_10.16. Fixed in 32:9.16.23-0.22.el8_10.16. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
bind9.16 is a widely used DNS server software that provides essential services for domain name resolution. It is known for its reliability and performance in managing DNS queries. However, recent vulnerabilities have been identified that could compromise its security, necessitating immediate attention from users and administrators.
Vulnerability Detail
The vulnerabilities identified in bind9.16, specifically CVE-2026-19666, CVE-2026-19667, and CVE-2026-80274, could allow attackers to exploit weaknesses in the DNS server, potentially leading to denial of service or unauthorized access to sensitive information. These vulnerabilities stem from flaws in the handling of DNS queries and responses, which could be manipulated by malicious actors. The CVSS score for this vulnerability is 7.5, indicating a high severity level that requires prompt remediation.
How To Fix
Minimum fixed version
32:9.16.23-0.22.el8_10.16
This is the first release that contains the fix.
sudo dnf update bind9.16Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the DNS server by configuring firewall rules to limit incoming connections to trusted IP addresses only. This can help mitigate the risk of exploitation until the package is updated.
Conclusion
The vulnerabilities in bind9.16 pose significant risks to DNS server operations, making it crucial for users to apply the necessary updates promptly. By following the outlined steps to update the package and implementing recommended workarounds, users can enhance their security posture against potential threats.
See every vulnerability recorded for bind9.16 →
FAQ
bind9.16 is a DNS server software that translates domain names into IP addresses, enabling users to access websites and services.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which analyzes your manifest file for vulnerabilities.
Failing to update bind9.16 could leave your system vulnerable to attacks, potentially resulting in service disruptions or data breaches.
Yes, Vulert allows you to monitor and alert for open-source vulnerabilities in your software using just a manifest file, without requiring installation.
The CVSS score for the vulnerabilities in bind9.16 is 7.5, indicating a high severity level that necessitates immediate action.
Related vulnerabilities
Recent vulnerabilities recorded for bind9.16.
