Description (CNA)
A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, and 9.20.9-S1 through 9.20.20-S1. BIND 9 versions 9.18.0 through 9.18.46 and 9.18.11-S1 through 9.18.46-S1 are NOT affected.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ISC / BIND 9 | affected 9.20.0 through 9.20.20; affected 9.21.0 through 9.21.19; affected 9.20.9-S1 through 9.20.20-S1; unaffected 9.18.0 through 9.18.46; unaffected 9.18.11-S1 through 9.18.46-S1 |
CWE
CWE-772
References
- https://kb.isc.org/docs/cve-2026-3104
- https://downloads.isc.org/isc/bind9/9.20.21
- https://downloads.isc.org/isc/bind9/9.21.20
ADP enrichment
No English description supplied.
No references supplied.
A flaw was found in the BIND resolver. A remote attacker can exploit this vulnerability by querying a specially crafted domain, which causes a memory leak. This memory leak can lead to a Denial of Service (DoS) condition, making the BIND resolver unavailable to legitimate users.