Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-13321

Fixed in a distro release EPSS <1%CVSS 8.6

The BIND resolver accepts validly-signed NSEC records where the "Next Domain Name" field points outside the signer's zone. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

Published 2026-07-22 · CVE record · OSV

Products: ISC BIND 9

Distro releases

ReleasePackageFixed in
AlmaLinux:10bind32:9.18.33-15.el10_2.10
AlmaLinux:10bind-chroot32:9.18.33-15.el10_2.10
AlmaLinux:10bind-devel32:9.18.33-15.el10_2.10
AlmaLinux:10bind-dnssec-utils32:9.18.33-15.el10_2.10
AlmaLinux:10bind-doc32:9.18.33-15.el10_2.10
AlmaLinux:10bind-libs32:9.18.33-15.el10_2.10
AlmaLinux:10bind-license32:9.18.33-15.el10_2.10
AlmaLinux:10bind-utils32:9.18.33-15.el10_2.10
AlmaLinux:8bind32:9.11.36-16.el8_10.14
AlmaLinux:8bind-chroot32:9.11.36-16.el8_10.14
AlmaLinux:8bind-devel32:9.11.36-16.el8_10.14
AlmaLinux:8bind-export-devel32:9.11.36-16.el8_10.14
AlmaLinux:8bind-export-libs32:9.11.36-16.el8_10.14
AlmaLinux:8bind-libs32:9.11.36-16.el8_10.14
AlmaLinux:8bind-libs-lite32:9.11.36-16.el8_10.14
AlmaLinux:8bind-license32:9.11.36-16.el8_10.14
AlmaLinux:8bind-lite-devel32:9.11.36-16.el8_10.14
AlmaLinux:8bind-pkcs1132:9.11.36-16.el8_10.14
AlmaLinux:8bind-pkcs11-devel32:9.11.36-16.el8_10.14
AlmaLinux:8bind-pkcs11-libs32:9.11.36-16.el8_10.14
AlmaLinux:8bind-pkcs11-utils32:9.11.36-16.el8_10.14
AlmaLinux:8bind-sdb32:9.11.36-16.el8_10.14
AlmaLinux:8bind-sdb-chroot32:9.11.36-16.el8_10.14
AlmaLinux:8bind-utils32:9.11.36-16.el8_10.14
AlmaLinux:8bind9.1632:9.16.23-0.22.el8_10.12
AlmaLinux:8bind9.16-chroot32:9.16.23-0.22.el8_10.12
AlmaLinux:8bind9.16-devel32:9.16.23-0.22.el8_10.12
AlmaLinux:8bind9.16-dnssec-utils32:9.16.23-0.22.el8_10.12
AlmaLinux:8bind9.16-doc32:9.16.23-0.22.el8_10.12
AlmaLinux:8bind9.16-libs32:9.16.23-0.22.el8_10.12
AlmaLinux:8bind9.16-license32:9.16.23-0.22.el8_10.12
AlmaLinux:8bind9.16-utils32:9.16.23-0.22.el8_10.12
AlmaLinux:8python3-bind32:9.11.36-16.el8_10.14
AlmaLinux:8python3-bind9.1632:9.16.23-0.22.el8_10.12
AlmaLinux:9bind32:9.16.23-40.el9_8.8
AlmaLinux:9bind-chroot32:9.16.23-40.el9_8.8
AlmaLinux:9bind-devel32:9.16.23-40.el9_8.8
AlmaLinux:9bind-dnssec-doc32:9.16.23-40.el9_8.8
AlmaLinux:9bind-dnssec-utils32:9.16.23-40.el9_8.8
AlmaLinux:9bind-doc32:9.16.23-40.el9_8.8
AlmaLinux:9bind-libs32:9.16.23-40.el9_8.8
AlmaLinux:9bind-license32:9.16.23-40.el9_8.8
AlmaLinux:9bind-utils32:9.16.23-40.el9_8.8
AlmaLinux:9bind9.1832:9.18.29-14.el9_8.8
AlmaLinux:9bind9.18-chroot32:9.18.29-14.el9_8.8
AlmaLinux:9bind9.18-devel32:9.18.29-14.el9_8.8
AlmaLinux:9bind9.18-dnssec-utils32:9.18.29-14.el9_8.8
AlmaLinux:9bind9.18-doc32:9.18.29-14.el9_8.8
AlmaLinux:9bind9.18-libs32:9.18.29-14.el9_8.8
AlmaLinux:9bind9.18-utils32:9.18.29-14.el9_8.8
AlmaLinux:9python3-bind32:9.16.23-40.el9_8.8
Alpine:v3.22bind9.20.26-r0
Alpine:v3.23bind9.20.26-r0
Alpine:v3.24bind9.20.26-r0
Debian:12bind91:9.18.49-1~deb12u2
Debian:13bind91:9.20.26-1~deb13u1
Debian:14bind91:9.20.26-1
Red Hat:enterprise_linux:10.2bind32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-chroot32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-debuginfo32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-debugsource32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-devel32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-dnssec-utils32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-dnssec-utils-debuginfo32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-doc32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-libs32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-libs-debuginfo32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-license32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-utils32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:10.2bind-utils-debuginfo32:9.18.33-15.el10_2.10
Red Hat:enterprise_linux:8bind32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-chroot32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-debugsource32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-devel32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-export-devel32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-export-libs32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-export-libs-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-libs32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-libs-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-libs-lite32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-libs-lite-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-license32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-lite-devel32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-pkcs1132:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-pkcs11-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-pkcs11-devel32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-pkcs11-libs32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-pkcs11-libs-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-pkcs11-utils32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-pkcs11-utils-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-sdb32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-sdb-chroot32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-sdb-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-utils32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind-utils-debuginfo32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8bind9.1632:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-chroot32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-debuginfo32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-debugsource32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-devel32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-dnssec-utils32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-dnssec-utils-debuginfo32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-doc32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-libs32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-libs-debuginfo32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-license32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-utils32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8bind9.16-utils-debuginfo32:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:8python3-bind32:9.11.36-16.el8_10.14
Red Hat:enterprise_linux:8python3-bind9.1632:9.16.23-0.22.el8_10.12
Red Hat:enterprise_linux:9bind32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-chroot32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-debuginfo32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-debugsource32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-devel32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-dnssec-doc32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-dnssec-utils32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-dnssec-utils-debuginfo32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-doc32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-libs32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-libs-debuginfo32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-license32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-utils32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind-utils-debuginfo32:9.16.23-40.el9_8.8
Red Hat:enterprise_linux:9bind9.1832:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-chroot32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-debuginfo32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-debugsource32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-devel32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-dnssec-utils32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-dnssec-utils-debuginfo32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-doc32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-libs32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-libs-debuginfo32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-utils32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9bind9.18-utils-debuginfo32:9.18.29-14.el9_8.8
Red Hat:enterprise_linux:9python3-bind32:9.16.23-40.el9_8.8
Red Hat:hummingbird:1bind0:9.20.26-0.1.hum1
Red Hat:hummingbird:1bind-chroot0:9.20.26-0.1.hum1
Red Hat:hummingbird:1bind-devel0:9.20.26-0.1.hum1
Red Hat:hummingbird:1bind-dnssec-utils0:9.20.26-0.1.hum1
Red Hat:hummingbird:1bind-doc0:9.20.26-0.1.hum1
Red Hat:hummingbird:1bind-libs0:9.20.26-0.1.hum1
Red Hat:hummingbird:1bind-utils0:9.20.26-0.1.hum1
Red Hat:rhel_aus:8.6bind9.1632:9.16.23-0.7.el8_6.11
Red Hat:rhel_aus:8.6bind9.16-libs32:9.16.23-0.7.el8_6.11
Red Hat:rhel_e4s:8.8bind9.1632:9.16.23-0.14.el8_8.9
Red Hat:rhel_e4s:8.8bind9.16-dnssec-utils32:9.16.23-0.14.el8_8.9
Red Hat:rhel_e4s:8.8bind9.16-libs32:9.16.23-0.14.el8_8.9
Red Hat:rhel_e4s:9.4bind32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-chroot32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-debuginfo32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-debugsource32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-dnssec-doc32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-dnssec-utils32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-dnssec-utils-debuginfo32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-libs32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-libs-debuginfo32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-license32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-utils32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4bind-utils-debuginfo32:9.16.23-18.el9_4.12
Red Hat:rhel_e4s:9.4python3-bind32:9.16.23-18.el9_4.12
Red Hat:rhel_els:7bind32:9.11.4-26.P2.el7_9.21
Red Hat:rhel_els:7bind-export-libs32:9.11.4-26.P2.el7_9.21
Red Hat:rhel_els:7bind-libs-lite32:9.11.4-26.P2.el7_9.21
Red Hat:rhel_els:7bind-pkcs1132:9.11.4-26.P2.el7_9.21
Red Hat:rhel_els:7bind-pkcs11-libs32:9.11.4-26.P2.el7_9.21
Red Hat:rhel_els:7bind-pkcs11-utils32:9.11.4-26.P2.el7_9.21
Red Hat:rhel_els:7bind-sdb32:9.11.4-26.P2.el7_9.21
Red Hat:rhel_eus:9.6bind32:9.16.23-31.el9_6.4
Red Hat:rhel_eus:9.6bind-dnssec-utils32:9.16.23-31.el9_6.4
Red Hat:rhel_eus:9.6bind-libs32:9.16.23-31.el9_6.4
Red Hat:rhel_eus:9.6bind-utils32:9.16.23-31.el9_6.4
Red Hat:rhel_eus_long_life:8.6bind9.1632:9.16.23-0.7.el8_6.11
Red Hat:rhel_eus_long_life:8.6bind9.16-libs32:9.16.23-0.7.el8_6.11
Red Hat:rhel_tus:8.8bind9.1632:9.16.23-0.14.el8_8.9
Red Hat:rhel_tus:8.8bind9.16-dnssec-utils32:9.16.23-0.14.el8_8.9
Red Hat:rhel_tus:8.8bind9.16-libs32:9.16.23-0.14.el8_8.9
Rocky Linux:10bind2:9.18.33-15.el10_2.10
Rocky Linux:8bind2:9.11.36-16.el8_10.14
Rocky Linux:8bind9.162:9.16.23-0.22.el8_10.12
Rocky Linux:9bind2:9.16.23-40.el9_8.8
Rocky Linux:9bind9.182:9.18.29-14.el9_8.8
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSbind9.16.50-150400.5.65.1
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSbind9.16.50-150400.5.65.1
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSbind9.16.50-150500.8.41.1
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSbind9.16.50-150500.8.41.1
SUSE:Linux Enterprise Micro 5.5bind9.16.50-150500.8.41.1
SUSE:Linux Enterprise Module for Basesystem 15 SP7bind9.20.26-150700.3.29.1
SUSE:Linux Enterprise Module for Basesystem 15 SP7bind9.16.6-150300.22.62.1
SUSE:Linux Enterprise Module for Server Applications 15 SP7bind9.20.26-150700.3.29.1
SUSE:Linux Enterprise Server 12 SP5-LTSSbind9.11.22-3.74.1
SUSE:Linux Enterprise Server 15 SP4-LTSSbind9.16.50-150400.5.65.1
SUSE:Linux Enterprise Server 15 SP5-LTSSbind9.16.50-150500.8.41.1
SUSE:Linux Enterprise Server 15 SP6-LTSSbind9.16.6-150300.22.62.1
SUSE:Linux Enterprise Server 15 SP6-LTSSbind9.18.50-150600.3.32.1
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5bind9.11.22-3.74.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP4bind9.16.50-150400.5.65.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP5bind9.16.50-150500.8.41.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP6bind9.16.6-150300.22.62.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP6bind9.18.50-150600.3.32.1
SUSE:Manager Client Tools for SLE Micro 5bind9.16.6-150000.12.91.1
SUSE:Multi Linux Manager Tools SLE-Micro-5bind9.16.6-150000.12.91.1
Ubuntu:18.04:LTSisc-dhcpno fix
Ubuntu:20.04:LTSbind9-libsno fix
Ubuntu:22.04:LTSbind91:9.18.39-0ubuntu0.22.04.7
Ubuntu:22.04:LTSbind91:9.18.39-0ubuntu0.22.04.5
Ubuntu:22.04:LTSbind9-libsno fix
Ubuntu:24.04:LTSbind91:9.18.39-0ubuntu0.24.04.6
Ubuntu:24.04:LTSbind91:9.18.39-0ubuntu0.24.04.8
Ubuntu:24.04:LTSisc-dhcpno fix
Ubuntu:26.04:LTSbind91:9.20.24-1ubuntu0.2
Ubuntu:26.04:LTSbind91:9.20.24-1ubuntu0.4
Ubuntu:26.04:LTSisc-dhcpno fix
Ubuntu:Pro:14.04:LTSbind91:9.9.5.dfsg-3ubuntu0.19+esm15
Ubuntu:Pro:16.04:LTSbind91:9.10.3.dfsg.P4-8ubuntu1.19+esm11
Ubuntu:Pro:18.04:LTSbind91:9.11.3+dfsg-1ubuntu1.19+esm6
Ubuntu:Pro:20.04:LTSbind91:9.18.30-0ubuntu0.20.04.2+esm3
openSUSE:Leap 16.0bind9.20.26-160000.1.1
openSUSE:Tumbleweedbind9.20.26-1.1