{"dataType":"CVE_RECORD","dataVersion":"1.0","cveMetadata":{"cveId":"GCVE-110-ISC-2026-94300","assignerOrgId":"","assignerShortName":"Vulnetix","state":"PUBLISHED","datePublished":"2026-10-21T12:30:55Z","dateUpdated":"","dateReserved":""},"containers":{"cna":{"providerMetadata":null,"title":"","descriptions":[{"lang":"en","value":"CVE: CVE-2026-94300\nTitle: Concurrent GSS-TSIG messages corrupt memory\nDocument version: 2.0\nPosting date: 21 October 2026\nProgram impacted: BIND 9\nVersions affected:\nBIND\n\n9.11.0 -\u003e 9.18.50\n9.20.0 -\u003e 9.20.29\n9.21.0 -\u003e 9.21.26\n\nBIND Supported Preview Edition\n\n9.11.3-S1 -\u003e 9.18.50-S1\n9.20.9-S1 -\u003e 9.20.29-S1\n\nSeverity: High\nExploitable: Remotely\nDescription:\nReplaying GSS-TSIG signed UDP messages can result in memory corruption in \"named\".  An attacker who can capture a previously signed UDP messa ...","supportingMedia":null}],"references":[{"url":"https://kb.isc.org/docs/cve-2026-94300","name":"CVE-2026-94300: Concurrent GSS-TSIG messages corrupt memory","tags":["advisory"]}],"metrics":null,"problemTypes":null,"affected":[{"vendor":"ISC","product":"BIND","collectionURL":"","packageName":"","repo":"","defaultStatus":"","versions":null,"cpes":null,"modules":null,"programFiles":null,"platforms":null}],"cpeApplicability":null,"rejectedReasons":null,"replacedBy":null,"x_vulnetix_aliases":{"direct":["CVE-2026-94300"]}},"adp":null}}