p PatchFirst

CVE-2026-77692

CVE-2026-77692 · Unauthenticated remote crash of named via a single DoH SIG(0) request

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An attacker can cause `named` to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG(0) record, and then closing the transport connection prematurely. This issue affects BIND 9 versions 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, and 9.20.9-S1 through 9.20.27-S1.

CVSS 7.5 · High · EPSS 6.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • bind 9

    Versions
    • ≥ 9.20.0, ≤ 9.20.27: Affected (custom)
    • ≥ 9.21.0, ≤ 9.21.25: Affected (custom)
    • ≥ 9.20.9-S1, ≤ 9.20.27-S1: Affected (custom)

    No fix published

  • bind9 Debian:12

    Versions
    • 1:9.18.12-1
    • 1:9.18.13-1
    • 1:9.18.16-1
    • 1:9.18.16-1~deb12u1
    • 1:9.18.16-1~deb12u1~bpo11+1
    • 1:9.18.19-1~deb12u1
    • 1:9.18.19-1~deb12u1~bpo11+1
    • 1:9.18.24-1
    • 1:9.18.24-1~bpo11+1
    • 1:9.18.28-1~deb12u1
    • 1:9.18.28-1~deb12u2
    • 1:9.18.33-1~deb12u2
    • 1:9.18.41-1~deb12u1
    • 1:9.18.44-1~deb12u1
    • 1:9.18.47-1~deb12u1
    • 1:9.18.49-1~deb12u1
    • 1:9.18.49-1~deb12u2
    • 1:9.19.10-1
    • 1:9.19.11-1
    • 1:9.19.14-1
    • 1:9.19.17-1
    • 1:9.19.19-1
    • 1:9.19.21-1
    • 1:9.19.24-185-g392e7199df2-1
    • 1:9.19.24-2
    • 1:9.19.6-1
    • 1:9.19.6-2
    • 1:9.20.0-1
    • 1:9.20.0-2
    • 1:9.20.1-1
    • 1:9.20.10-1
    • 1:9.20.11-1
    • 1:9.20.11-2
    • 1:9.20.11-3
    • 1:9.20.11-4
    • 1:9.20.11-4~bpo12+1
    • 1:9.20.15-1
    • 1:9.20.15-1~deb13u1
    • 1:9.20.15-1~deb13u1~bpo12+1
    • 1:9.20.15-2
    • 1:9.20.18-1
    • 1:9.20.18-1~deb13u1
    • 1:9.20.18-1~deb13u1~bpo12+1
    • 1:9.20.19-1
    • 1:9.20.19-1~bpo12+1
    • 1:9.20.2-1
    • 1:9.20.20-1
    • 1:9.20.20-1~bpo12+1
    • 1:9.20.21-1
    • 1:9.20.21-1~deb13u1
    • 1:9.20.21-1~deb13u1~bpo12+1
    • 1:9.20.22-1
    • 1:9.20.23-1
    • 1:9.20.23-1~deb13u1
    • 1:9.20.23-1~deb13u1~bpo12+1
    • 1:9.20.24-1
    • 1:9.20.26-1
    • 1:9.20.26-1~deb13u1
    • 1:9.20.26-1~deb13u1~bpo12+1
    • 1:9.20.27-1
    • 1:9.20.27-2
    • 1:9.20.29-1
    • 1:9.20.29-1~deb13u1
    • 1:9.20.3-1
    • 1:9.20.4-2
    • 1:9.20.4-3
    • 1:9.20.4-4
    • 1:9.20.5-1
    • 1:9.20.7-1
    • 1:9.20.8-1
    • 1:9.20.8-2
    • 1:9.20.8-3
    • 1:9.20.8-4
    • 1:9.20.8-5
    • 1:9.20.8-6
    • 1:9.20.9-1
    • 1:9.20.9-2
    • 1:9.21.0-1
    • 1:9.21.1-1
    • 1:9.21.10-1
    • 1:9.21.10-10
    • 1:9.21.10-2
    • 1:9.21.10-4
    • 1:9.21.10-5
    • 1:9.21.10-6
    • 1:9.21.10-7
    • 1:9.21.10-8
    • 1:9.21.10-9
    • 1:9.21.14-1
    • 1:9.21.18-1
    • 1:9.21.21-1
    • 1:9.21.22-1
    • 1:9.21.23-1
    • 1:9.21.25-1
    • 1:9.21.26-1
    • 1:9.21.3-1
    • 1:9.21.6-1
    • 1:9.21.7-1
    • 1:9.21.9-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • bind9 Debian:13

    Versions
    • 1:9.20.11-4
    • 1:9.20.15-1
    • 1:9.20.15-1~deb13u1
    • 1:9.20.15-1~deb13u1~bpo12+1
    • 1:9.20.15-2
    • 1:9.20.18-1
    • 1:9.20.18-1~deb13u1
    • 1:9.20.18-1~deb13u1~bpo12+1
    • 1:9.20.19-1
    • 1:9.20.19-1~bpo12+1
    • 1:9.20.20-1
    • 1:9.20.20-1~bpo12+1
    • 1:9.20.21-1
    • 1:9.20.21-1~deb13u1
    • 1:9.20.21-1~deb13u1~bpo12+1
    • 1:9.20.22-1
    • 1:9.20.23-1
    • 1:9.20.23-1~deb13u1
    • 1:9.20.23-1~deb13u1~bpo12+1
    • 1:9.20.24-1
    • 1:9.20.26-1
    • 1:9.20.26-1~deb13u1
    • 1:9.20.26-1~deb13u1~bpo12+1
    • 1:9.20.27-1
    • 1:9.20.27-2
    Affected ranges
    • ECOSYSTEM: < 1:9.20.29-1~deb13u1

    Update to 1:9.20.29-1~deb13u1

  • bind9 Debian:14

    Versions
    • 1:9.20.11-4
    • 1:9.20.15-1
    • 1:9.20.15-1~deb13u1
    • 1:9.20.15-1~deb13u1~bpo12+1
    • 1:9.20.15-2
    • 1:9.20.18-1
    • 1:9.20.18-1~deb13u1
    • 1:9.20.18-1~deb13u1~bpo12+1
    • 1:9.20.19-1
    • 1:9.20.19-1~bpo12+1
    • 1:9.20.20-1
    • 1:9.20.20-1~bpo12+1
    • 1:9.20.21-1
    • 1:9.20.21-1~deb13u1
    • 1:9.20.21-1~deb13u1~bpo12+1
    • 1:9.20.22-1
    • 1:9.20.23-1
    • 1:9.20.23-1~deb13u1
    • 1:9.20.23-1~deb13u1~bpo12+1
    • 1:9.20.24-1
    • 1:9.20.26-1
    • 1:9.20.26-1~deb13u1
    • 1:9.20.26-1~deb13u1~bpo12+1
    • 1:9.20.27-1
    • 1:9.20.27-2
    • 1:9.20.29-1~deb13u1
    Affected ranges
    • ECOSYSTEM: < 1:9.20.29-1

    Update to 1:9.20.29-1

  • isc-dhcp Ubuntu:18.04:LTS

    Versions
    • 4.3.5-3ubuntu2
    • 4.3.5-3ubuntu3
    • 4.3.5-3ubuntu4
    • 4.3.5-3ubuntu5
    • 4.3.5-3ubuntu6
    • 4.3.5-3ubuntu7
    • 4.3.5-3ubuntu7.1
    • 4.3.5-3ubuntu7.2
    • 4.3.5-3ubuntu7.3
    • 4.3.5-3ubuntu7.4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • bind9-libs Ubuntu:20.04:LTS

    Versions
    • 1:9.11.16+dfsg-3~build1
    • 1:9.11.16+dfsg-3~ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • bind9-libs Ubuntu:22.04:LTS

    Versions
    • 1:9.11.19+dfsg-2.1ubuntu1
    • 1:9.11.19+dfsg-2.1ubuntu2
    • 1:9.11.19+dfsg-2.1ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • isc-dhcp Ubuntu:24.04:LTS

    Versions
    • 4.4.3-P1-2ubuntu5
    • 4.4.3-P1-4ubuntu1
    • 4.4.3-P1-4ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • bind9 Ubuntu:26.10

    Versions
    • 1:9.20.18-1ubuntu2
    • 1:9.20.23-1ubuntu1
    • 1:9.20.24-1ubuntu2
    • 1:9.20.24-1ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • bind9 Ubuntu:26.04:LTS

    Versions
    • 1:9.20.11-1ubuntu2
    • 1:9.20.11-1ubuntu3
    • 1:9.20.18-1ubuntu1
    • 1:9.20.18-1ubuntu2
    • 1:9.20.18-1ubuntu2.1
    • 1:9.20.24-1ubuntu0.1
    • 1:9.20.24-1ubuntu0.2
    • 1:9.20.24-1ubuntu0.3
    Affected ranges
    • ECOSYSTEM: < 1:9.20.24-1ubuntu0.4

    Update to 1:9.20.24-1ubuntu0.4

  • isc-dhcp Ubuntu:26.04:LTS

    Versions
    • 4.4.3-P1-4ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →