{
  "cves": [
    "CVE-2026-19630",
    "CVE-2026-19662",
    "CVE-2026-94300",
    "CVE-2026-96888",
    "CVE-2026-97313"
  ],
  "cvss": 0.0,
  "database_specific": {
    "severity": "IMPORTANT"
  },
  "description": "[32:9.16.23-0.22.21]\n- CVE-2026-94300 bind9.16: bind: Arbitrary code execution via\n  GSS-TSIG UDP message replay\n\n[32:9.16.23-0.22.20]\n- CVE-2026-97313 bind9.16: bind: Denial of service via assertion\n  failure in RPZ query processing\n\n[32:9.16.23-0.22.19]\n- CVE-2026-96888 bind9.16: bind: Denial of Service via assertion failure\n  during redirect processing\n\n[32:9.16.23-0.22.18]\n- CVE-2026-19630 bind9.16: BIND: Denial of Service via unbounded processing of crafted DNS messages\n  processing of crafted DNS messages\n\n[32:9.16.23-0.22.17]\n- Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver.",
  "id": "ELSA-2026-94011",
  "ovalId": "oval:com.oracle.elsa:def:202694011",
  "source": "oracle_linux",
  "title": "ELSA-2026-94011:  bind9.16 security update (IMPORTANT)",
  "url": "https://linux.oracle.com/errata/ELSA-2026-94011.html"
}