GCVE-110-MAGEIA-2026-163

Advisory Published

Vulnetix · Advisory published May 29, 2026

Updated bind package fixes security vulnerabilities: * BIND 9 server memory exhaustion during GSS-API TKEY negotiation (CVE-2026-3039) * Amplification vulnerabilities via self-pointed glue records (CVE-2026-3592) * Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation (CVE-2026-3593) * Invalid handling of CLASS != IN (CVE-2026-5946) * SIG(0) validation during query flood may lead to undefined behavior (CVE-2026-5947) *Unbounded resend loop in BIND 9 resolver (CVE-2026-5950)

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	bind	0 (affected), 9.18.49-1.mga9 (unaffected)	—

References

Updated bind packages fix security vulnerabilities

advisory

Updated bind packages fix security vulnerabilities

issue

Updated bind packages fix security vulnerabilities

url

Browse GCVE Records

73,734 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON