elsa-2026-94011
oracle_linux
Description
[32:9.16.23-0.22.21] - CVE-2026-94300 bind9.16: bind: Arbitrary code execution via GSS-TSIG UDP message replay [32:9.16.23-0.22.20] - CVE-2026-97313 bind9.16: bind: Denial of service via assertion failure in RPZ query processing [32:9.16.23-0.22.19] - CVE-2026-96888 bind9.16: bind: Denial of Service via assertion failure during redirect processing [32:9.16.23-0.22.18] - CVE-2026-19630 bind9.16: BIND: Denial of Service via unbounded processing of crafted DNS messages processing of crafted DNS messages [32:9.16.23-0.22.17] - Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver.
Timeline
- Published
- unknown
- Last Modified
- unknown
CVSS Details
CVSS details not available.
Affected Products
No product information available.
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"cves": [
"CVE-2026-19630",
"CVE-2026-19662",
"CVE-2026-94300",
"CVE-2026-96888",
"CVE-2026-97313"
],
"cvss": 0.0,
"database_specific": {
"severity": "IMPORTANT"
},
"description": "[32:9.16.23-0.22.21]\n- CVE-2026-94300 bind9.16: bind: Arbitrary code execution via\n GSS-TSIG UDP message replay\n\n[32:9.16.23-0.22.20]\n- CVE-2026-97313 bind9.16: bind: Denial of service via assertion\n failure in RPZ query processing\n\n[32:9.16.23-0.22.19]\n- CVE-2026-96888 bind9.16: bind: Denial of Service via assertion failure\n during redirect processing\n\n[32:9.16.23-0.22.18]\n- CVE-2026-19630 bind9.16: BIND: Denial of Service via unbounded processing of crafted DNS messages\n processing of crafted DNS messages\n\n[32:9.16.23-0.22.17]\n- Fix CVE-2026-19662: NOQNAME proof use-after-free could crash recursive resolver.",
"id": "ELSA-2026-94011",
"ovalId": "oval:com.oracle.elsa:def:202694011",
"source": "oracle_linux",
"title": "ELSA-2026-94011: bind9.16 security update (IMPORTANT)",
"url": "https://linux.oracle.com/errata/ELSA-2026-94011.html"
}