VYPR
← All advisories
High severity7.5NVD Advisory· Published Sep 16, 2026

CVE-2026-76163

CVE-2026-76163

Description

If BIND is loaded with a "named.conf" file that contains no global "options" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1.

Affected products

2
  • Isc/Bind9inferred
    Range: >=9.20.0,<9.20.28,>=9.21.0,<9.21.26
  • Isc/Bindllm-fuzzy
    Range: 9.20.0-9.20.27, 9.21.0-9.21.25, 9.20.9-S1-9.20.27-S1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.