5.3 MediumCWE-606
CVE-2026-5950
ISC BIND 9 vulnerability
ISCBIND 9
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 19 Oct
0.8%probability of exploitation in the next 30 days
Higher than 56% of scored CVEs
SeverityCVSS
5.3Medium
Description NVD
An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticated attacker to cause severe resource exhaustion by sending queries that trigger specific retry conditions. This issue affects BIND 9 versions 9.18.36 through 9.18.48, 9.20.8 through 9.20.22, 9.21.7 through 9.21.21, 9.18.36-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.
Coverage 1 article · 1 outlet
- BIND 9 flaws let attackers crash DNS and drain bandwidthSecurityOnline · first in our coverage · mentions it in passing