CVE-2026-76163 — named aborts on a TKEY query when the user configuration has no global options statement

CVE-2026-76163

named aborts on a TKEY query when the user configuration has no global options statement PUBLISHED

Description (CNA)

If BIND is loaded with a "`named.conf`" file that contains no global "`options`" block, an attacker can send a query of QTYPE TKEY which may cause an assertion failure and subsequent unexpected program exit. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1.

Affected (CNA)

Vendor / product	Versions
ISC / BIND 9	affected 9.20.0 through 9.20.27; affected 9.21.0 through 9.21.25; affected 9.20.9-S1 through 9.20.27-S1

CWE

CWE-617

References

https://kb.isc.org/docs/cve-2026-76163
https://downloads.isc.org/isc/bind9/9.20.29
https://downloads.isc.org/isc/bind9/9.21.26

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.