Red Hat Security Advisory

RHSA-2026:20334

Red Hat Hardened Images RPMs bug fix and enhancement update

Released 2026-05-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Hardened Images bind-9.18.49-1.hum1@aarch64, bind-9.18.49-1.hum1@src, bind-9.18.49-1.hum1@x86_64 +12

Fixes 4 records

TI-2026-05215 CVE-2026-5946 · GHSA-cqgq-ff3f-rj7r

Invalid handling of CLASS != IN

MEDIUM 43

Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CHAOS` or `HESIOD`, or DNS messages that specify meta-classes (`ANY` or `NONE`) in…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01942 Published 2026-05-20 Partial fix CWE-125

TI-2026-02623 CVE-2026-3039 · GHSA-p65f-mhrm-vhrc

BIND 9 server memory exhaustion during GSS-API TKEY negotiation

MEDIUM 41

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01086 Published 2026-05-20 Partial fix CWE-771

TI-2026-05217 CVE-2026-5950 · GHSA-2pjm-rchf-gxmp

Unbounded resend loop in BIND 9 resolver

LOW 31

An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticated attacker to cause severe resource exhaustion by sending queries that trigge…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0066 Published 2026-05-20 Partial fix CWE-606

TI-2026-03097 CVE-2026-3592 · GHSA-63mj-2fw3-4w3h

Amplification vulnerabilities via self-pointed glue records

LOW 30

BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00406 Published 2026-05-20 Partial fix CWE-408