Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-13204

Fixed in a distro release EPSS <1%CVSS 7.5

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

Published 2026-07-22 · CVE record · OSV

Products: ISC BIND 9

Distro releases

ReleasePackageFixed in
AlmaLinux:10bind32:9.18.33-15.el10_2.10
AlmaLinux:10bind-chroot32:9.18.33-15.el10_2.10
AlmaLinux:10bind-devel32:9.18.33-15.el10_2.10
AlmaLinux:10bind-dnssec-utils32:9.18.33-15.el10_2.10
AlmaLinux:10bind-doc32:9.18.33-15.el10_2.10
AlmaLinux:10bind-libs32:9.18.33-15.el10_2.10
AlmaLinux:10bind-license32:9.18.33-15.el10_2.10
AlmaLinux:10bind-utils32:9.18.33-15.el10_2.10
AlmaLinux:8bind32:9.11.36-16.el8_10.14
AlmaLinux:8bind-chroot32:9.11.36-16.el8_10.14
AlmaLinux:8bind-devel32:9.11.36-16.el8_10.14
AlmaLinux:8bind-export-devel32:9.11.36-16.el8_10.14
AlmaLinux:8bind-export-libs32:9.11.36-16.el8_10.14
AlmaLinux:8bind-libs32:9.11.36-16.el8_10.14
AlmaLinux:8bind-libs-lite32:9.11.36-16.el8_10.14
AlmaLinux:8bind-license32:9.11.36-16.el8_10.14
AlmaLinux:8bind-lite-devel32:9.11.36-16.el8_10.14
AlmaLinux:8bind-pkcs1132:9.11.36-16.el8_10.14
AlmaLinux:8bind-pkcs11-devel32:9.11.36-16.el8_10.14
AlmaLinux:8bind-pkcs11-libs32:9.11.36-16.el8_10.14
AlmaLinux:8bind-pkcs11-utils32:9.11.36-16.el8_10.14
AlmaLinux:8bind-sdb32:9.11.36-16.el8_10.14
AlmaLinux:8bind-sdb-chroot32:9.11.36-16.el8_10.14
AlmaLinux:8bind-utils32:9.11.36-16.el8_10.14
AlmaLinux:8bind9.1632:9.16.23-0.22.el8_10.12
AlmaLinux:8bind9.16-chroot32:9.16.23-0.22.el8_10.12
AlmaLinux:8bind9.16-devel32:9.16.23-0.22.el8_10.12
AlmaLinux:8bind9.16-dnssec-utils32:9.16.23-0.22.el8_10.12
AlmaLinux:8bind9.16-doc32:9.16.23-0.22.el8_10.12
AlmaLinux:8bind9.16-libs32:9.16.23-0.22.el8_10.12
AlmaLinux:8bind9.16-license32:9.16.23-0.22.el8_10.12
AlmaLinux:8bind9.16-utils32:9.16.23-0.22.el8_10.12
AlmaLinux:8python3-bind32:9.11.36-16.el8_10.14
AlmaLinux:8python3-bind9.1632:9.16.23-0.22.el8_10.12
AlmaLinux:9bind32:9.16.23-40.el9_8.8
AlmaLinux:9bind-chroot32:9.16.23-40.el9_8.8
AlmaLinux:9bind-devel32:9.16.23-40.el9_8.8
AlmaLinux:9bind-dnssec-doc32:9.16.23-40.el9_8.8
AlmaLinux:9bind-dnssec-utils32:9.16.23-40.el9_8.8
AlmaLinux:9bind-doc32:9.16.23-40.el9_8.8
AlmaLinux:9bind-libs32:9.16.23-40.el9_8.8
AlmaLinux:9bind-license32:9.16.23-40.el9_8.8
AlmaLinux:9bind-utils32:9.16.23-40.el9_8.8
AlmaLinux:9bind9.1832:9.18.29-14.el9_8.8
AlmaLinux:9bind9.18-chroot32:9.18.29-14.el9_8.8
AlmaLinux:9bind9.18-devel32:9.18.29-14.el9_8.8
AlmaLinux:9bind9.18-dnssec-utils32:9.18.29-14.el9_8.8
AlmaLinux:9bind9.18-doc32:9.18.29-14.el9_8.8
AlmaLinux:9bind9.18-libs32:9.18.29-14.el9_8.8
AlmaLinux:9bind9.18-utils32:9.18.29-14.el9_8.8
AlmaLinux:9python3-bind32:9.16.23-40.el9_8.8
Alpine:v3.22bind9.20.26-r0
Alpine:v3.23bind9.20.26-r0
Alpine:v3.24bind9.20.26-r0
Debian:12bind91:9.18.49-1~deb12u2
Debian:13bind91:9.20.26-1~deb13u1
Debian:14bind91:9.20.26-1
Red Hat:enterprise_linux:10.2bind32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-chroot32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-debuginfo32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-debugsource32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-devel32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-dnssec-utils32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-dnssec-utils-debuginfo32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-doc32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-libs32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-libs-debuginfo32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-license32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-utils32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-utils-debuginfo32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:8bind32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-chroot32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-debugsource32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-devel32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-export-devel32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-export-libs32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-export-libs-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-libs32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-libs-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-libs-lite32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-libs-lite-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-license32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-lite-devel32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-pkcs1132:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-pkcs11-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-pkcs11-devel32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-pkcs11-libs32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-pkcs11-libs-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-pkcs11-utils32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-pkcs11-utils-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-sdb32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-sdb-chroot32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-sdb-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-utils32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-utils-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind9.1632:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-chroot32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-debuginfo32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-debugsource32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-devel32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-dnssec-utils32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-dnssec-utils-debuginfo32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-doc32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-libs32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-libs-debuginfo32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-license32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-utils32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-utils-debuginfo32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8python3-bind32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8python3-bind9.1632:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:9bind32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-chroot32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-debuginfo32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-debugsource32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-devel32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-dnssec-doc32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-dnssec-utils32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-dnssec-utils-debuginfo32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-doc32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-libs32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-libs-debuginfo32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-license32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-utils32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-utils-debuginfo32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind9.1832:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-chroot32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-debuginfo32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-debugsource32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-devel32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-dnssec-utils32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-dnssec-utils-debuginfo32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-doc32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-libs32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-libs-debuginfo32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-utils32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-utils-debuginfo32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9python3-bind32:9.16.23-40.el9_8.8
Red Hat:hummingbird:1bind0:9.20.26-0.1.hum1
Red Hat:hummingbird:1bind-chroot0:9.20.26-0.1.hum1
Red Hat:hummingbird:1bind-devel0:9.20.26-0.1.hum1
Red Hat:hummingbird:1bind-dnssec-utils0:9.20.26-0.1.hum1
Red Hat:hummingbird:1bind-doc0:9.20.26-0.1.hum1
Red Hat:hummingbird:1bind-libs0:9.20.26-0.1.hum1
Red Hat:hummingbird:1bind-utils0:9.20.26-0.1.hum1
Red Hat:rhel_aus:8.6bind9.1632:9.16.23-0.7.el8_6.11
Red Hat:rhel_aus:8.6bind9.16-libs32:9.16.23-0.7.el8_6.11
Red Hat:rhel_e4s:8.8bind9.1632:9.16.23-0.14.el8_8.9
Red Hat:rhel_e4s:8.8bind9.16-dnssec-utils32:9.16.23-0.14.el8_8.9
Red Hat:rhel_e4s:8.8bind9.16-libs32:9.16.23-0.14.el8_8.9
Red Hat:rhel_e4s:9.4bind32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-chroot32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-debuginfo32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-debugsource32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-dnssec-doc32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-dnssec-utils32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-dnssec-utils-debuginfo32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-libs32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-libs-debuginfo32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-license32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-utils32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-utils-debuginfo32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4python3-bind32:9.16.23-18.el9_4.12
Red Hat:rhel_els:7bind32:9.11.4-26.P2.el7_9.21
Red Hat:rhel_els:7bind-export-libs32:9.11.4-26.P2.el7_9.21
Red Hat:rhel_els:7bind-libs-lite32:9.11.4-26.P2.el7_9.21
Red Hat:rhel_els:7bind-pkcs1132:9.11.4-26.P2.el7_9.21
Red Hat:rhel_els:7bind-pkcs11-libs32:9.11.4-26.P2.el7_9.21
Red Hat:rhel_els:7bind-pkcs11-utils32:9.11.4-26.P2.el7_9.21
Red Hat:rhel_els:7bind-sdb32:9.11.4-26.P2.el7_9.21
Red Hat:rhel_eus:9.6bind32:9.16.23-31.el9_6.4
Red Hat:rhel_eus:9.6bind-dnssec-utils32:9.16.23-31.el9_6.4
Red Hat:rhel_eus:9.6bind-libs32:9.16.23-31.el9_6.4
Red Hat:rhel_eus:9.6bind-utils32:9.16.23-31.el9_6.4
Red Hat:rhel_eus_long_life:8.6bind9.1632:9.16.23-0.7.el8_6.11
Red Hat:rhel_eus_long_life:8.6bind9.16-libs32:9.16.23-0.7.el8_6.11
Red Hat:rhel_tus:8.8bind9.1632:9.16.23-0.14.el8_8.9
Red Hat:rhel_tus:8.8bind9.16-dnssec-utils32:9.16.23-0.14.el8_8.9
Red Hat:rhel_tus:8.8bind9.16-libs32:9.16.23-0.14.el8_8.9
Rocky Linux:10bind2:9.18.33-15.el10_2.10
Rocky Linux:8bind2:9.11.36-16.el8_10.14
Rocky Linux:8bind9.162:9.16.23-0.22.el8_10.12
Rocky Linux:9bind2:9.16.23-40.el9_8.8
Rocky Linux:9bind9.182:9.18.29-14.el9_8.8
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSbind9.16.50-150400.5.65.1
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSbind9.16.50-150400.5.65.1
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSbind9.16.50-150500.8.41.1
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSbind9.16.50-150500.8.41.1
SUSE:Linux Enterprise Micro 5.5bind9.16.50-150500.8.41.1
SUSE:Linux Enterprise Module for Basesystem 15 SP7bind9.20.26-150700.3.29.1
SUSE:Linux Enterprise Module for Basesystem 15 SP7bind9.16.6-150300.22.62.1
SUSE:Linux Enterprise Module for Server Applications 15 SP7bind9.20.26-150700.3.29.1
SUSE:Linux Enterprise Server 12 SP5-LTSSbind9.11.22-3.74.1
SUSE:Linux Enterprise Server 15 SP4-LTSSbind9.16.50-150400.5.65.1
SUSE:Linux Enterprise Server 15 SP5-LTSSbind9.16.50-150500.8.41.1
SUSE:Linux Enterprise Server 15 SP6-LTSSbind9.16.6-150300.22.62.1
SUSE:Linux Enterprise Server 15 SP6-LTSSbind9.18.50-150600.3.32.1
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5bind9.11.22-3.74.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP4bind9.16.50-150400.5.65.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP5bind9.16.50-150500.8.41.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP6bind9.16.6-150300.22.62.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP6bind9.18.50-150600.3.32.1
SUSE:Manager Client Tools for SLE Micro 5bind9.16.6-150000.12.91.1
SUSE:Multi Linux Manager Tools SLE-Micro-5bind9.16.6-150000.12.91.1
Ubuntu:18.04:LTSisc-dhcpno fix
Ubuntu:20.04:LTSbind9-libsno fix
Ubuntu:22.04:LTSbind91:9.18.39-0ubuntu0.22.04.7
Ubuntu:22.04:LTSbind91:9.18.39-0ubuntu0.22.04.6
Ubuntu:22.04:LTSbind9-libsno fix
Ubuntu:24.04:LTSbind91:9.18.39-0ubuntu0.24.04.7
Ubuntu:24.04:LTSbind91:9.18.39-0ubuntu0.24.04.8
Ubuntu:24.04:LTSisc-dhcpno fix
Ubuntu:26.04:LTSbind91:9.20.24-1ubuntu0.3
Ubuntu:26.04:LTSbind91:9.20.24-1ubuntu0.4
Ubuntu:26.04:LTSisc-dhcpno fix
Ubuntu:Pro:14.04:LTSbind91:9.9.5.dfsg-3ubuntu0.19+esm15
Ubuntu:Pro:16.04:LTSbind91:9.10.3.dfsg.P4-8ubuntu1.19+esm11
Ubuntu:Pro:18.04:LTSbind91:9.11.3+dfsg-1ubuntu1.19+esm6
Ubuntu:Pro:20.04:LTSbind91:9.18.30-0ubuntu0.20.04.2+esm3
openSUSE:Leap 16.0bind9.20.26-160000.1.1
openSUSE:Tumbleweedbind9.20.26-1.1