p PatchFirst

ALPINE-CVE-2026-13204

ALPINE-CVE-2026-13204

This page contains facts from public vulnerability sources. Check the original advisory before updating.

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

CVSS 7.5 · High · Fix available

Published
Updated

Stack: system

Affected products and versions

  • bind Alpine:v3.22

    Affected ranges
    • ECOSYSTEM: < 9.20.26-r0

    Update to 9.20.26-r0

  • bind Alpine:v3.23

    Affected ranges
    • ECOSYSTEM: < 9.20.26-r0

    Update to 9.20.26-r0

  • bind Alpine:v3.24

    Affected ranges
    • ECOSYSTEM: < 9.20.26-r0

    Update to 9.20.26-r0

Original sources

Check your server →