CVE detail
CVE-2026-3104
A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain. This issue affects BIND 9 versions 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, and 9.20.9-S1 through 9.20.20-S1. BIND 9 versions 9.18.0 through 9.18.46 and 9.18.11-S1 through 9.18.46-S1 are NOT affected.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 22.0 · diversity 20.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
8 source links · newest first
- BIND Updates Patch High-Severity VulnerabilitiesSecurityWeek
Specially crafted domains could be used to cause out-of-memory conditions, leading to memory leaks in the BIND resolvers.
newswww.securityweek.comMar 26, 2026, 1:31 PM - https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-3104.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comMar 25, 2026, 2:16 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2451310bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comMar 25, 2026, 2:16 PM - https://access.redhat.com/security/cve/CVE-2026-3104access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 25, 2026, 2:16 PM - https://access.redhat.com/errata/RHSA-2026:6935access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMar 25, 2026, 2:16 PM - https://kb.isc.org/docs/cve-2026-3104kb.isc.org
No excerpt available.
Vendor Advisorykb.isc.orgMar 25, 2026, 2:16 PM - https://downloads.isc.org/isc/bind9/9.21.20downloads.isc.org
No excerpt available.
Patchdownloads.isc.orgMar 25, 2026, 2:16 PM - https://downloads.isc.org/isc/bind9/9.20.21downloads.isc.org
No excerpt available.
Patchdownloads.isc.orgMar 25, 2026, 2:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-48043CVSS 5.3 · Medium
Netty is a network application framework for development of protocol servers and clients. In netty-codec-http2 prior to versions 4.1.135.Final and 4.2.15.Final, the `DelegatingDec…
- CVE-2026-48006CVSS 8.7 · High
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the RedisArrayAggregator handler perman…
- CVE-2026-32874CVSS 7.5 · High
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Versions 5.4.0 through 5.11.0 contain an accumulating memory leak in JSON parsing lar…
- CVE-2026-1605CVSS 7.5 · High
In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is processed an…
- CVE-2022-31222CVSS 2.3 · Low
Dell BIOS versions contain a Missing Release of Resource after Effective Lifetime vulnerability. A local authenticated administrator user could potentially exploit this vulnerabil…
- CVE-2022-22155CVSS 6.5 · Medium
An Uncontrolled Resource Consumption vulnerability in the handling of IPv6 neighbor state change events in Juniper Networks Junos OS allows an adjacent attacker to cause a memory…