Ubuntu 20.04 Bind9 Important DoS Resource Issues CVE-2026-3039 USN-8682

Find practical guidance for preventing, investigating, and responding to Linux security problems. Find practical guidance for preventing, investigating, and responding to Linux security problems. _ Review Linux Privileges ×

Several security issues were fixed in Bind. Software Description: - bind9: Internet Domain Name Server Details: Vitaly Simonovich discovered that Bind could exhaust memory during GSS-API TKEY negotiation. A remote attacker could possibly use this issue to cause Bind to use excessive resources, leading to a denial of service. (CVE-2026-3039) Shuhan Zhang discovered that Bind incorrectly handled self-pointed glue records. A remote attacker could possibly use this issue to use Bind in denial of service amplification attacks against other systems. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2026-3592) It was discovered that Bind incorrectly handled DNS messages whose class was not IN. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2026-5946)

Several security issues were fixed in Bind.

Software Description:

- bind9: Internet Domain Name Server

Vitaly Simonovich discovered that Bind could exhaust memory during

GSS-API TKEY negotiation. A remote attacker could possibly use this

issue to cause Bind to use excessive resources, leading to a denial of

service. (CVE-2026-3039)

Shuhan Zhang discovered that Bind incorrectly handled self-pointed glue

records. A remote attacker could possibly use this issue to use Bind in

denial of service amplification attacks against other systems.

This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.

It was discovered that Bind incorrectly handled DNS messages whose

class was not IN. A remote attacker could possibly use this issue to

cause Bind to crash, resulting in a denial of service. This issue only

affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2026-5946)

The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS bind9 1:9.18.30-0ubuntu0.20.04.2+esm2 Available with Ubuntu Pro Ubuntu 18.04 LTS bind9 1:9.11.3+dfsg-1ubuntu1.19+esm5 Available with Ubuntu Pro Ubuntu 16.04 LTS bind9 1:9.10.3.dfsg.P4-8ubuntu1.19+esm10 Available with Ubuntu Pro Ubuntu 14.04 LTS bind9 1:9.9.5.dfsg-3ubuntu0.19+esm14 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2026-3039, CVE-2026-3592, CVE-2026-5946

Ubuntu Security Notice USN-8682-1

Get the latest Linux and open source security news straight to your inbox.