/
← Voltar ao feed
high

CERT-FR flags multiple ISC BIND vulnerabilities enabling remote code execution and denial of service

1 fonte(s) · 1 atualização(ões) · publicado 21/10/2026 21:00 · coletado há 6 horas

CERT-FR published advisory CERTFR-2026-AVI-1365 on multiple vulnerabilities in ISC BIND, based on ISC security bulletins released on 21 October 2026. The flaws could allow a remote attacker to achieve arbitrary code execution or cause a denial of service. Three CVEs are referenced: CVE-2026-94300, CVE-2026-96888 and CVE-2026-97313. The advisory does not report active exploitation.

Entenda a falha

A vulnerabilidade

CERT-FR advisory CERTFR-2026-AVI-1365 covers three vulnerabilities in ISC BIND: CVE-2026-94300, CVE-2026-96888 and CVE-2026-97313. Together they allow a remote attacker to cause denial of service or arbitrary code execution. The advisory does not map each CVE to an impact, give CVSS scores, or state the prerequisites. Affected: BIND before 9.20.30, BIND before 9.21.27, and BIND Supported Preview Edition before 9.20.30-S1. Fixes are in the releases described in the ISC bulletins of 21 October 2026. The advisory does not report active exploitation.

Como foi descoberta

The articles do not say who found the flaws or how. CERT-FR published its advisory on 22 October 2026, based on the ISC security bulletins of 21 October 2026, one per CVE on kb.isc.org. It reports no exploitation.

Explicação gerada por IA a partir da matéria e dos artigos, em 23/10/2026 12:18.

Detalhes técnicos

  • Affected: BIND Supported Preview Edition before 9.20.30-S1, BIND before 9.20.30, and BIND before 9.21.27.
  • Impact categories listed: remote denial of service and remote arbitrary code execution.
  • The advisory does not map individual CVEs to specific impacts, and gives no CVSS scores or exploitation details.

Remediação

  • Apply the fixed releases described in the ISC security bulletins for each CVE (kb.isc.org), as CERT-FR directs.
  • Fixed versions are implied to be 9.20.30, 9.21.27 and 9.20.30-S1 or later.

Linha do tempo

  1. cert.ssi.gouv.fr ↗ · pub. 21/10/2026 21:00 · coletado 23/10 12:01 primeiro registro

    CERT-FR flags multiple ISC BIND vulnerabilities enabling remote code execution and denial of service

    ler a análise desta fonte

    CERT-FR published advisory CERTFR-2026-AVI-1365 on multiple vulnerabilities in ISC BIND, based on ISC security bulletins released on 21 October 2026. The flaws could allow a remote attacker to achieve arbitrary code execution or cause a denial of service. Three CVEs are referenced: CVE-2026-94300, CVE-2026-96888 and CVE-2026-97313. The advisory does not report active exploitation.

    Technical Details

    • Affected: BIND Supported Preview Edition before 9.20.30-S1, BIND before 9.20.30, and BIND before 9.21.27.
    • Impact categories listed: remote denial of service and remote arbitrary code execution.
    • The advisory does not map individual CVEs to specific impacts, and gives no CVSS scores or exploitation details.

    Remediation

    • Apply the fixed releases described in the ISC security bulletins for each CVE (kb.isc.org), as CERT-FR directs.
    • Fixed versions are implied to be 9.20.30, 9.21.27 and 9.20.30-S1 or later.