GCVE-110-ISC-2026-94300

Advisory Published

Vulnetix · Advisory published October 21, 2026

CVE: CVE-2026-94300 Title: Concurrent GSS-TSIG messages corrupt memory Document version: 2.0 Posting date: 21 October 2026 Program impacted: BIND 9 Versions affected: BIND 9.11.0 -> 9.18.50 9.20.0 -> 9.20.29 9.21.0 -> 9.21.26 BIND Supported Preview Edition 9.11.3-S1 -> 9.18.50-S1 9.20.9-S1 -> 9.20.29-S1 Severity: High Exploitable: Remotely Description: Replaying GSS-TSIG signed UDP messages can result in memory corruption in "named". An attacker who can capture a previously signed UDP messa ...

Download JSON Look up in the Resolve Platform

Affected Products

Vendor	Product	Versions	Platforms
ISC	BIND	—	—

Aliases

CVE-2026-94300

References

CVE-2026-94300: Concurrent GSS-TSIG messages corrupt memory

advisory

Browse GCVE Records

922 records in the GCVE database · Updated November 4, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Look up in the Resolve Platform Download JSON