CVE-2026-75029

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.11.0 through 9.18.50 BIND 9 versions 9.20.0 through 9.20.27 BIND 9 versions 9.21.0 through 9.21.25 BIND 9 versions 9.11.3-S1 through 9.18.50-S1 BIND 9 versions 9.20.9-S1 through 9.20.27-S1

Description An attacker can send multiple copies of a record that should only exist once, such as an SOA record, to named in a query response. When the RDATA is identical across all copies, the record is appended to the in-memory RDATA set. This behavior can lead to increased memory consumption within the negative cache and potentially open other memory-related attack vectors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.