CVE-2026-1519

Name of the Vulnerable Software and Affected Versions BIND versions 9.11.0 through 9.16.50 BIND versions 9.18.0 through 9.18.46 BIND versions 9.20.0 through 9.20.20 BIND versions 9.21.0 through 9.21.19 BIND versions 9.11.3-S1 through 9.16.50-S1 BIND versions 9.18.11-S1 through 9.18.46-S1 BIND versions 9.20.9-S1 through 9.20.20-S1

Description A maliciously crafted DNS zone can cause excessive CPU consumption in a BIND resolver performing DNSSEC validation. Authoritative-only servers are generally not affected, but may be vulnerable if they make recursive queries.

Recommendations Update BIND to a version beyond 9.16.50. Update BIND to a version beyond 9.18.46. Update BIND to a version beyond 9.20.20. Update BIND to a version beyond 9.21.19. Update BIND to a version beyond 9.16.50-S1. Update BIND to a version beyond 9.18.46-S1. Update BIND to a version beyond 9.20.20-S1.