High severity7.5NVD Advisory· Published Sep 16, 2026· Updated Sep 17, 2026
CVE-2026-19667
CVE-2026-19667
Description
If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in named results in a negative cache entry of 0 bytes. When this entry is subsequently read, named aborts. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
38- osv-coords37 versionspkg:rpm/almalinux/bind-export-develpkg:rpm/almalinux/bind-pkcs11pkg:rpm/opensuse/bind&distro=openSUSE%20Tumbleweedpkg:rpm/almalinux/bindpkg:rpm/almalinux/bind-licensepkg:rpm/almalinux/bind9.16pkg:rpm/almalinux/bind9.16-develpkg:rpm/almalinux/bind9.16-dnssec-utilspkg:rpm/almalinux/python3-bind9.16pkg:rpm/almalinux/bind-lite-develpkg:rpm/almalinux/bind-sdb-chrootpkg:rpm/almalinux/bind9.16-utilspkg:rpm/almalinux/bind-export-libspkg:rpm/almalinux/bind-docpkg:rpm/almalinux/bind9.16-libspkg:rpm/almalinux/bind-chrootpkg:rpm/almalinux/bind-develpkg:rpm/almalinux/bind-dnssec-utilspkg:rpm/almalinux/bind-utilspkg:rpm/almalinux/bind9.16-docpkg:rpm/almalinux/bind9.16-licensepkg:rpm/almalinux/bind-libs-litepkg:rpm/almalinux/bind-pkcs11-utilspkg:rpm/almalinux/bind-sdbpkg:rpm/almalinux/bind-pkcs11-develpkg:rpm/almalinux/bind-libspkg:rpm/almalinux/bind-pkcs11-libspkg:rpm/almalinux/bind9.18pkg:rpm/almalinux/bind9.18-chrootpkg:rpm/almalinux/bind9.18-develpkg:rpm/almalinux/bind9.18-dnssec-utilspkg:rpm/almalinux/bind9.18-docpkg:rpm/almalinux/bind9.18-libspkg:rpm/almalinux/bind9.18-utilspkg:rpm/almalinux/bind-dnssec-docpkg:rpm/almalinux/python3-bindpkg:rpm/almalinux/bind9.16-chroot
< 32:9.11.36-16.el8_10.16+ 36 more
- (no CPE)range: < 32:9.11.36-16.el8_10.16
- (no CPE)range: < 32:9.11.36-16.el8_10.16
- (no CPE)range: < 9.20.29-1.1
- (no CPE)range: < 32:9.18.33-15.el10_2.12
- (no CPE)range: < 32:9.18.33-15.el10_2.12
- (no CPE)range: < 32:9.16.23-0.22.el8_10.16
- (no CPE)range: < 32:9.16.23-0.22.el8_10.16
- (no CPE)range: < 32:9.16.23-0.22.el8_10.16
- (no CPE)range: < 32:9.16.23-0.22.el8_10.16
- (no CPE)range: < 32:9.11.36-16.el8_10.16
- (no CPE)range: < 32:9.11.36-16.el8_10.16
- (no CPE)range: < 32:9.16.23-0.22.el8_10.16
- (no CPE)range: < 32:9.11.36-16.el8_10.16
- (no CPE)range: < 32:9.18.33-15.el10_2.12
- (no CPE)range: < 32:9.16.23-0.22.el8_10.16
- (no CPE)range: < 32:9.18.33-15.el10_2.12
- (no CPE)range: < 32:9.18.33-15.el10_2.12
- (no CPE)range: < 32:9.18.33-15.el10_2.12
- (no CPE)range: < 32:9.18.33-15.el10_2.12
- (no CPE)range: < 32:9.16.23-0.22.el8_10.16
- (no CPE)range: < 32:9.16.23-0.22.el8_10.16
- (no CPE)range: < 32:9.11.36-16.el8_10.16
- (no CPE)range: < 32:9.11.36-16.el8_10.16
- (no CPE)range: < 32:9.11.36-16.el8_10.16
- (no CPE)range: < 32:9.11.36-16.el8_10.16
- (no CPE)range: < 32:9.18.33-15.el10_2.12
- (no CPE)range: < 32:9.11.36-16.el8_10.16
- (no CPE)range: < 32:9.18.29-14.el9_8.10
- (no CPE)range: < 32:9.18.29-14.el9_8.10
- (no CPE)range: < 32:9.18.29-14.el9_8.10
- (no CPE)range: < 32:9.18.29-14.el9_8.10
- (no CPE)range: < 32:9.18.29-14.el9_8.10
- (no CPE)range: < 32:9.18.29-14.el9_8.10
- (no CPE)range: < 32:9.18.29-14.el9_8.10
- (no CPE)range: < 32:9.16.23-40.el9_8.10
- (no CPE)range: < 32:9.16.23-40.el9_8.10
- (no CPE)range: < 32:9.16.23-0.22.el8_10.16
Patches
Vulnerability mechanics
References
3News mentions
4- ⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser HijacksThe Hacker News · Sep 21, 2026
- ISC Patches 14 Vulnerabilities in BIND 9 Security UpdateSecurityWeek · Sep 17, 2026
- BIND 9 Update Fixes 14 Flaws, Including an Unauthenticated Crash Over DNS-over-HTTPSThe Hacker News · Sep 17, 2026
- ISC Patches 14 BIND 9 Vulnerabilities, Primarily Causing Denial-of-ServiceVypr Intelligence · Sep 16, 2026