Cloudanix VulnDB

CVE-2026-1519

High · 7.5

CVSS

7.5

EPSS

1.7%

Published

Mar 25, 2026

CISA due date

—

The record

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.

Affected packages

Ecosystem Package Introduced Fixed
SUSE:Linux Enterprise Server 15 SP6-LTSS bind 0 9.18.33-150600.3.21.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP6 bind 0 9.18.33-150600.3.21.1
openSUSE:Leap 15.6 bind 0 9.18.33-150600.3.21.1
openSUSE:Leap 16.0 bind 0 9.20.21-160000.1.1
openSUSE:Tumbleweed bind 0 9.20.21-1.1

Related vulnerabilities