PT-2026-27773 · Isc+2 · Bind+2

Publicado

2026-01-01

·

Atualizado

2026-05-21

·

CVE-2026-3119

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions BIND versions 9.20.0 through 9.20.20 BIND versions 9.21.0 through 9.21.19 BIND versions 9.20.9-S1 through 9.20.20-S1
Description BIND may terminate unexpectedly when processing a correctly signed query containing a TKEY record. This issue occurs if an incoming request has a valid transaction signature (TSIG) from a key declared in the named configuration. The affected code is reached under specific conditions related to authenticated queries.
Recommendations Update BIND to a version later than 9.20.20. Update BIND to a version later than 9.21.19. Update BIND to a version later than 9.20.20-S1.

Correção

Assertion Failure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-617

Identificadores relacionados

CVE-2026-3119
OPENSUSE-SU-2026:10448-1
OPENSUSE-SU-2026:20550-1
RHSA-2026:6935
SUSE-SU-2026:1351-1
SUSE-SU-2026:21204-1
USN-8124-1

Produtos afetados

Bind
Linuxmint
Ubuntu