CVE-2026-19630

{
  "id": "CVE-2026-19630",
  "sourceIdentifier": "[email protected]",
  "published": "2026-10-21T13:18:32.453",
  "lastModified": "2026-10-26T21:10:00.170",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND.  A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during processing.\nThis issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1."
    },
    {
      "lang": "es",
      "value": "En un resolvedor BIND, los mensajes entrantes del protocolo DNS con una estructura particular provocan un procesamiento adicional, sin que BIND imponga ningún límite. Un mensaje DNS con un número maliciosamente grande de esas estructuras hará que BIND consuma cantidades desproporcionadas de tiempo de CPU y memoria durante el procesamiento.  \\nEste problema afecta a BIND?9 desde la versión 9.11.0 hasta la versión 9.18.50 incluida, desde la versión 9.20.0 hasta la versión 9.20.29 incluida, desde la versión 9.21.0 hasta la versión 9.21.26 incluida, desde la versión 9.11.3?S1 hasta la versión 9.18.50?S1 incluida, y desde la versión 9.20.9?S1 hasta la versión 9.20.29?S1 incluida."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "ISC",
          "product": "BIND 9",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "9.11.0",
              "lessThanOrEqual": "9.18.50",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "9.20.0",
              "lessThanOrEqual": "9.20.29",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "9.21.0",
              "lessThanOrEqual": "9.21.26",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "9.11.3-S1",
              "lessThanOrEqual": "9.18.50-S1",
              "versionType": "custom",
              "status": "affected"
            },
            {
              "version": "9.20.9-S1",
              "lessThanOrEqual": "9.20.29-S1",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-10-21T15:19:21.749441Z",
          "id": "CVE-2026-19630",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-407"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://downloads.isc.org/isc/bind9/9.20.30",
      "source": "[email protected]"
    },
    {
      "url": "https://downloads.isc.org/isc/bind9/9.21.27",
      "source": "[email protected]"
    },
    {
      "url": "https://kb.isc.org/docs/cve-2026-19630",
      "source": "[email protected]"
    }
  ]
}