7.5

CVE-2026-1519: isc bind Unchecked Input for Loop Condition

CVSS: 7.5v3.1HighModified
AliasesALPINE-CVE-2026-1519SUSE-SU-2026:1209-1SUSE-SU-2026:1229-1
Published 25-03-2026Last modified 17-09-2026
Open JSON

Vulnerability summary

CVE-2026-1519 is a high (CVSS 7.5) Unchecked Input for Loop Condition vulnerability in isc bind. EPSS estimates a 1.60% chance of exploitation in the next 30 days, higher than 75.4% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
1.60%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 7 · Related 6
MGASA-2026-0152OPENSUSE-SU-2026:10448-1OPENSUSE-SU-2026:20550-1RHSA-2026:6935SUSE-SU-2026:1351-1SUSE-SU-2026:21204-1

Timeline

  1. 25-03-2026
    PublishedVulnerability first disclosed.
  2. 17-09-2026
    Last modifiedVulnerability information updated.

Description

If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.

CVSS metrics

6 scores · 6 sources · 1 version

EPSS trend

Probability

1.60%

Chance of exploitation in the next 30 days

Percentile

75%

Versus all other CVEs

30-day change

0.00 pp

From 1.60% on 19-09-2026

19-09-202619-10-2026
EPSS score
1.60%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat57 products
  • bind< 32:9.11.4-26.P2.el7_9.20 | < 32:9.8.2-0.68.rc1.el6_10.18 | < 32:9.11.36-8.el8_8.9 | < 32:9.11.36-3.el8_6.12 | < 32:9.11.26-4.el8_4.9 | < 32:9.18.33-4.el10_0.3 | < 32:9.16.23-18.el9_4.11 | < 32:9.16.23-31.el9_6.3 | < 32:9.16.23-11.el9_2.10 | < 32:9.16.23-34.el9_7.2 | < 32:9.18.33-10.el10_1.3 | < 32:9.11.36-16.el8_10.7
  • bind-chroot< 32:9.11.36-8.el8_8.9 | < 32:9.11.36-3.el8_6.12 | < 32:9.16.23-34.el9_7.2 | < 32:9.18.33-10.el10_1.3 | < 32:9.11.36-16.el8_10.7
  • bind-debuginfo< 32:9.11.36-8.el8_8.9 | < 32:9.11.36-3.el8_6.12 | < 32:9.16.23-34.el9_7.2 | < 32:9.18.33-10.el10_1.3 | < 32:9.11.36-16.el8_10.7
  • bind-debugsource< 32:9.11.36-8.el8_8.9 | < 32:9.11.36-3.el8_6.12 | < 32:9.16.23-34.el9_7.2 | < 32:9.18.33-10.el10_1.3 | < 32:9.11.36-16.el8_10.7
  • bind-devel< 32:9.11.4-26.P2.el7_9.20 | < 32:9.8.2-0.68.rc1.el6_10.18 | < 32:9.11.36-8.el8_8.9 | < 32:9.11.36-3.el8_6.12 | < 32:9.11.26-4.el8_4.9 | < 32:9.16.23-34.el9_7.2 | < 32:9.18.33-10.el10_1.3 | < 32:9.11.36-16.el8_10.7
Suse16 products
  • bind&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 9.16.50-150400.5.59.1
  • bind&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 9.16.50-150400.5.59.1
  • bind&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 9.16.50-150500.8.35.1
  • bind&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS< 9.16.50-150500.8.35.1
  • bind&distro=SUSE Linux Enterprise Micro 5.5< 9.16.50-150500.8.35.1
Ubuntu3 products
  • bind9All versions (No fix recorded) | < 1:9.9.5.dfsg-3ubuntu0.19+esm15 | < 1:9.10.3.dfsg.P4-8ubuntu1.19+esm11 | < 1:9.11.3+dfsg-1ubuntu1.19+esm6 | < 1:9.18.30-0ubuntu0.20.04.2+esm3 | < 1:9.18.39-0ubuntu0.22.04.3 | < 1:9.18.39-0ubuntu0.24.04.3 | < 1:9.20.11-1ubuntu2.2
  • bind9-libsAll versions (No fix recorded)
  • isc-dhcpAll versions (No fix recorded)
Isc2 products
  • bind≥ 9.11.0, ≤ 9.16.50 | ≥ 9.18.0, < 9.18.47 | ≥ 9.20.0, < 9.20.21 | ≥ 9.21.0, < 9.21.20
  • bind 9≥ 9.11.0, ≤ 9.16.50 | ≥ 9.18.0, ≤ 9.18.46 | ≥ 9.20.0, ≤ 9.20.20 | ≥ 9.21.0, ≤ 9.21.19 | ≥ 9.11.3-S1, ≤ 9.16.50-S1 | ≥ 9.18.11-S1, ≤ 9.18.46-S1 | ≥ 9.20.9-S1, ≤ 9.20.20-S1
Alpine1 product
  • bind≥ 9.11.0, < 9.18.47-r0 | ≥ 9.11.0, < 9.20.21-r0
Debian1 product
  • bind9< 1:9.20.21-1 | < 1:9.18.47-1~deb12u1 | < 1:9.20.21-1~deb13u1
Opensuse1 product
  • bind&distro=openSUSE Leap 15.6< 9.18.33-150600.3.21.1

7 vendors · 81 products

References

68 links
Show all 68 references