Skip to content
Critical DNS Vulnerabilities in Fedora BIND 9.21.22 Require Immediate Attention

Critical DNS Vulnerabilities in Fedora BIND 9.21.22 Require Immediate Attention

First seen 15 Jun 2026, 02:33 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 16, 2026 at 02:22 UTC
  • •Multiple critical vulnerabilities in BIND 9.21.22 require urgent patching.
  • •CVE-2026-5950 has a proof of concept available, increasing exploitation risk.
  • •Affected systems include Fedora 43 and 44, with updates available via 'dnf'.

Fedora has released important security updates for BIND 9.21.22, addressing multiple vulnerabilities including CVE-2026-3592, CVE-2026-3039, CVE-2026-5946, CVE-2026-5950, CVE-2026-5947, and CVE-2026-3593. These vulnerabilities can lead to issues such as resource leaks, unbounded recursion loops, and crashes under load. The updates are crucial for systems running Fedora 43 and 44, as they mitigate risks associated with DNS server operations. The vulnerabilities were published on May 20, 2026, with a proof of concept for CVE-2026-5950 released on June 14, 2026. Administrators are advised to apply the updates promptly to protect against potential exploitation. The updates can be installed using the 'dnf' package manager. The overall impact is significant, affecting many users of the Fedora operating system.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 97d ago How this analysis works

Timeline

2026-05-20
Multiple CVEs published for BIND 9.21.22
CVE-2026-3592, CVE-2026-3039, CVE-2026-5946, CVE-2026-5950, CVE-2026-5947, and CVE-2026-3593 were published, highlighting critical vulnerabilities.
Linuxsecurity
2026-05-20
CVE-2026-3592 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-20
CVE-2026-3039 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-20
CVE-2026-3593 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-20
CVE-2026-5947 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-20
CVE-2026-5946 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-06-14
First public PoC for CVE-2026-5950 released
A proof of concept for CVE-2026-5950 was made public, raising concerns about active exploitation.
Linuxsecurity
2026-06-15
Fedora releases updates for BIND 9.21.22
Fedora 43 and 44 users are urged to update to BIND 9.21.22 to mitigate critical vulnerabilities.
Linuxsecurity

More articles in this cluster (3)

Following this threat?

Track Fedora and CVE-2026-3039 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 3