CVE detail
CVE-2026-3039
BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue affects BIND 9 versions 9.0.0 through 9.16.50, 9.18.0 through 9.18.48, 9.20.0 through 9.20.22, 9.21.0 through 9.21.21, 9.9.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.48-S1, and 9.20.9-S1 through 9.20.22-S1.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 27.1 · diversity 20.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
14 source links · newest first
Information published.
vendormsrc.microsoft.comMay 23, 2026, 8:01 AM- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3039.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comMay 20, 2026, 1:16 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2479767bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comMay 20, 2026, 1:16 PM - https://access.redhat.com/security/cve/CVE-2026-3039access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 20, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:24368access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 20, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:24367access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 20, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:24339access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 20, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:24338access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 20, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:23360access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 20, 2026, 1:16 PM - https://access.redhat.com/errata/RHSA-2026:20334access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 20, 2026, 1:16 PM - https://kb.isc.org/docs/cve-2026-3039kb.isc.org
No excerpt available.
Vendor Advisorykb.isc.orgMay 20, 2026, 1:16 PM - https://downloads.isc.org/isc/bind9/9.21.22downloads.isc.org
No excerpt available.
Patchdownloads.isc.orgMay 20, 2026, 1:16 PM - https://downloads.isc.org/isc/bind9/9.20.23downloads.isc.org
No excerpt available.
Patchdownloads.isc.orgMay 20, 2026, 1:16 PM - https://downloads.isc.org/isc/bind9/9.18.49downloads.isc.org
No excerpt available.
Patchdownloads.isc.orgMay 20, 2026, 1:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-1519CVSS 7.5 · High
If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaf…
- CVE-2023-50387CVSS 7.5 · High
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more…
- CVE-2023-6516CVSS 7.5 · High
To keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asyn…
- CVE-2023-2828CVSS 7.5 · High
Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The…
- CVE-2018-5743CVSS 7.5 · High
By design, BIND is intended to limit the number of TCP clients that can be connected at any given time. The number of allowed connections is a tunable parameter which, if unset, d…
- CVE-2026-54638CVSS 7.5 · High
gotd/td is a T Telegram MTProto API client in Go. Prior to 0.145.1, proto.UnencryptedMessage.Decode in proto/unencrypted_message.go read attacker controlled dataLen from an unauth…