CVE-2026-3592
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver queries a specially crafted zone, it will consume disproportionate resources. Affects multiple BIND 9 versions.
Risk Assessment
An attacker can overload the DNS server, causing denial of service (DoS) and network disruption. This may impact availability of critical services.
Recommendation
Update BIND to version 9.16.51, 9.18.49, 9.20.23, 9.21.22 or later. Restrict queries to trusted zones.
Original NVD description (English source)
BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially crafted zone, the resolver will consume disproportionate resources. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.