CVE-2026-94300

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.11.0 through 9.18.50 BIND 9 versions 9.20.0 through 9.20.29 BIND 9 versions 9.21.0 through 9.21.26 BIND 9 versions 9.11.3-S1 through 9.18.50-S1 BIND 9 versions 9.20.9-S1 through 9.20.29-S1

Description Replaying GSS-TSIG signed UDP messages can lead to memory corruption in named. An attacker capable of capturing a previously signed UDP message can replay it while the negotiated TSIG key remains valid. By combining this with crafted queries to a zone under the attacker's control, remote code execution may be achieved.

Recommendations Upgrade to version 9.20.30. Upgrade to version 9.21.27.