SUSE-SU-2026:22198-1: bind&distro=SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise
Vulnerability summary
SUSE-SU-2026:22198-1 is a vulnerability in bind&distro=SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise with no CVSS score yet.
Advisory lineage
Upstream 6 · Downstream 0 · Related 6Timeline
- 20-06-2026PublishedVulnerability first disclosed.
- 24-06-2026Last modifiedVulnerability information updated.
Description
Security update for bind This update for bind fixes the following issues Upgrade to release 9.20.23: - CVE-2026-3039: BIND 9 server memory exhaustion during GSS-API TKEY negotiation (bsc#1265591). - CVE-2026-3592: Amplification vulnerabilities via self-pointed glue records (bsc#1265592). - CVE-2026-3593: Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation (bsc#1265593). - CVE-2026-5946: Invalid handling of CLASS != IN (bsc#1265594). - CVE-2026-5947: SIG(0) validation during query flood may lead to undefined behavior (bsc#1265595). - CVE-2026-5950: Unbounded resend loop in BIND 9 resolver (bsc#1265596).
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Suse2 products
- bind&distro=SUSE Linux Enterprise Server 16.0< 9.20.23-160000.1.1
- bind&distro=SUSE Linux Enterprise Server for SAP applications 16.0< 9.20.23-160000.1.1
1 vendor · 2 products