# Multiple vulnerabilities discovered in Bind DNS server

> **Key takeaway:** A series of vulnerabilities in Bind can lead to denial of service, cache poisoning, or DNSSEC validation bypass.

**Published:** 2026-10-14T13:00:49+00:00 
**Source:** Ubuntu Security & Release Notices 
**Category:** distro-news 
**Canonical URL:** https://fosswire.org/news/multiple-vulnerabilities-discovered-in-bind-dns-server.html 

## Summary
Ubuntu has released security notices regarding several vulnerabilities in the Bind DNS software. These flaws affect various Ubuntu releases, ranging from 14.04 LTS to 26.04 LTS, and include risks such as remote denial of service, cache poisoning, and DNSSEC validation bypass.

## Vulnerability details
- **Denial of Service (DoS):** Multiple CVEs (CVE-2025-8677, CVE-2026-1519, CVE-2026-10822, CVE-2026-11622, CVE-2026-11721, CVE-2026-13204, CVE-2026-19662, CVE-2026-19666) allow attackers to crash Bind or exhaust CPU/memory resources.
- **DNSSEC Bypasses:** Vulnerabilities such as CVE-2026-10723, CVE-2026-13321, and CVE-2026-13204 allow attackers to bypass DNSSEC validation through NSEC3 impersonation or incorrect out-of-zone validation.
- **Cache Poisoning:** CVE-2025-40778 and CVE-2026-11721 enable remote attackers to perform cache poisoning attacks.
- **Memory Safety:** CVE-2026-19662 involves a use-after-free error related to cached DNSSEC proofs, affecting versions up to 26.04 LTS.

## Why it matters
Since Bind is a critical component of DNS infrastructure, these vulnerabilities pose significant risks to network stability and security for users on affected Ubuntu distributions.