News
cybersecurity UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame? - Ars Technica Security vulnerability VU#124705: BaseChat – Audio Dating App, Android version 9.8.1, contains multiple vulnerabilities - CERT/CC Vulnerability Notes cybersecurity Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges - The Hacker News cybersecurity LLMJacking Emerges as Thriving Cybercriminal Enterprise - Dark Reading cybersecurity cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes - The Hacker News cybersecurity Barracuda warns of critical flaws allowing root access to devices - BleepingComputer cybersecurity Frontline Education Data Breach Impacts Over 1.3 Million - SecurityWeek vulnerability USN-8970-1: GVfs vulnerabilities - Ubuntu Security Notices cybersecurity 3AM Affiliate Embraces AI-Like Loops in European School Attack - Dark Reading cybersecurity UK school estate hit by 3AM ransomware in suspected AI-assisted attack - BleepingComputer ai Working collaboratively to fight scams in Asia Pacific - Google - Gemini & AI vulnerability USN-8969-1: Bind vulnerabilities - Ubuntu Security Notices cybersecurity Police seizes over 100 servers in investment scam crackdown - BleepingComputer threat-intel Researcher Discovers Path Traversal Flaw in Renault Navigation System That Enables Root Code Execution - GBHackers ai The Download: controlling AI agents and “Super Intelligence” loyalty tests - MIT Technology Review
1 / 15
All news ›
Vulnerability

USN-8969-1: Bind vulnerabilities

It was discovered that Bind incorrectly handled certain DNS messages with repeated singleton records such as SOA, CNAME, or DNAME records. A remote attacker could possibly use this issue to cause Bind to use excessive memory, leading to a denial of service. This issue only affected Ubuntu 26.10. (CVE-2026-75029) It was discovered that Bind incorrectly handled cached DNSSEC proofs. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. This issue only affected Ubuntu 26.10. (CVE-2026-19662) It was discovered that Bind incorrectly handled certain invalid DNSSEC records. A remote attacker could possibly use this issue to cause Bind to use excessive CPU resources, leading to a denial of service. This issue only affected Ubuntu 26.10. (CVE-2026-19668) It was discovered that Bind incorrectly handled malformed answers on resolvers configured to use DNS64. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a d

Continue on Ubuntu Security Notices ↗ ‹ All news Get the newsletter

The summary and image come from Ubuntu Security Notices; the image is shown from their website.