Do Son ISC fixes four BIND 9 vulnerabilities, including CVE-2026-94300 memory corruption and denial of service bugs. Upgrade to BIND 9.20.30 or 9.21.27.
ISC
ISC fixed 9 BIND vulnerabilities in 9.20.26 and 9.21.24. The top BIND vulnerability, CVE-2026-13321, enables DNSSEC cache poisoning. Patch now.
Internet Systems Consortium released patches fixing six critical BIND 9 flaws that cause memory exhaustion and unexpected daemon crashes.
BIND 9 patches 3 flaws including a sneaky ACL bypass (CVE-2026-3591) and a High-severity CPU exhaustion bug. Secure your DNS infrastructure now.
ISC warns of a high-severity stack overflow in Kea DHCP (CVE-2026-3608). Remote attackers can crash daemons and kill network services. Upgrade to 3.0.3 now.
High-severity BIND 9 flaw CVE-2025-13878 allows remote server crashes via single packet. Update to v9.18.44 or v9.20.18 immediately to prevent DoS.
ISC warned of a High-severity DoS flaw (CVE-2025-11232) in Kea DHCPv4. A crafted DHCP packet can crash the server due to improper hostname validation, disrupting IP assignment. Patch to v3.0.2/3.1.3.
The Internet Systems Consortium (ISC) has issued patches for three high-severity vulnerabilities impacting the BIND 9 DNS...
A high-severity DoS flaw (CVE-2025-8696) in Stork UI allows unauthenticated attackers to crash the server with excessive data, leading to resource exhaustion.
A new report reveals a high-severity flaw (CVE-2025-40779) in the Kea DHCP server that allows a single crafted packet to crash the service, leading to a DoS condition.
ISC warns of two high-impact vulnerabilities in BIND preview editions (CVE-2025-40776, CVE-2025-40777), enabling cache poisoning and DoS attacks. Patch immediately!
ISC uncovers security flaws in its Kea DHCP server, including privilege escalation and data leakage. Update to Kea 2.4.2, 2.6.3, or 2.7.9 immediately.
ISC, the maintainers of the widely-used BIND DNS server software, has released security updates to address four high-severity vulnerabilities