AZL-103362
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-103362.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-103362
- Upstream
- CVE-2026-81736
- Published
- 2026-09-16T14:17:10Z
- Modified
- 2026-09-23T05:36:13Z
- Summary
- CVE-2026-81736 affecting package bind 9.20.26-1
- Details
-
If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, and is then queried for the root of that tree, the resolver will spend disproportionate CPU time constructing the response. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.27, 9.21.0 through 9.21.25, 9.18.11-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.27-S1.
- References