High [CVE-2026-19666] Denial of Service via malformed DNS64 responses
This high-severity Red Hat Linux advisory covers CVE-2026-19666; related products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
Denial of Service via malformed DNS64 responses. Red Hat rates this important (CVSS 7.5).
Weakness: CWE-617. Red Hat lists fixing advisory RHSA-2026:75577 with package bind9.18-32:9.18.29-14.el9_8.10, bind-main-9.20.29-0.1.hum1, bind-32:9.18.33-15.el10_2.12, bind-32:9.16.23-40.el9_8.10.
Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 10.
- 9.11.0
- 9.18.50
- 9.20.0
- 9.20.27
- 9.21.0
- 9.21.25
- 9.11.3
- 9.20.9
Official advisory · high-confidence parse· fetched 13 days ago·verify at source
- bind9.18-32:9.18.29-14.el9_8.10
- bind-main-9.20.29-0.1.hum1
- bind-32:9.18.33-15.el10_2.12
- bind-32:9.16.23-40.el9_8.10
- RHSA-2026:75577
Official advisory · high-confidence parse· fetched 13 days ago·verify at source
Mitigation checklist
- To mitigate this issue, disable the `dns64` feature in the BIND resolver configuration if it is not required. This can be done by removing or commenting out the `dns64` configuration block in `named.conf` or related configuration files. After modifying the configuration, the BIND service (`named`) must be reloaded or restarted for the changes to take effect. This action may temporarily interrupt DNS resolution services.
Official advisory · high-confidence parse· fetched 13 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.