← Back to Feed

ISC BIND Multiple Vulnerabilities

September 18, 2026 · HKCERT · Severity: HIGH

Multiple vulnerabilities were identified in ISC BIND. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, data manipulation and security restriction bypass on the targeted system. Impact Denial of Service Data Manipulation Security Restriction Bypass System / Technologies affected BIND version 9.11.0 to 9.18.50 BIND version 9.18.0 to 9.18.50 BIND version 9.20.0 to 9.20.27 BIND version 9.21.0 to 9.21.25 BIND Supported Preview Edition version 9.11.3-S1 to 9.18.50-S1 BIND Supported Preview Edition version 9.20.9-S1 to 9.20.27-S1 Solutions Before installation of the software, please visit the vendor web-site for more details.   Apply fixes issued by the vendor: BIND version 9.20.29 BIND version 9.21.26 BIND Supported Preview Edition version 9.20.29-S1.

Key Takeaways

  • ISC BIND multiple vulnerabilities require urgent patching by DNS operators worldwide to prevent service disruption and potential remote code execution on DNS infrastructure.
  • The critical nature of DNS to network operations means unpatched BIND vulnerabilities can lead to widespread service outages and potential traffic redirection to malicious destinations.
  • DNS administrators should inventory all BIND instances, apply the latest patches, and implement defense-in-depth measures to protect critical DNS infrastructure.
☕ Buy a Coffee