CLSA-2026-1785886464

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785886464.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1785886464
Upstream
Published
2026-08-04T23:34:34Z
Modified
2026-10-26T09:31:40Z
Summary
Fix CVE(s): CVE-2026-1519
Details
  • SECURITY UPDATE: Excessive NSEC3 iterations cause high CPU load during insecure delegation validation (DNSSEC CPU denial of service)
    • debian/patches/CVE-2026-1519.patch: cap NSEC3 iterations at DNS_NSEC3_MAXITERATIONS (150) during the insecurity proof and treat the delegation as insecure when the limit is exceeded; skip re-verifying already-secure rdatasets in the negative-response and verify paths, in lib/dns/validator.c and lib/dns/include/dns/types.h.
    • CVE-2026-1519
References

Affected packages

TuxCare:Ubuntu:20.04
bind9

Package

Name
bind9
Purl
pkg:deb/tuxcare/bind9?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785886464.json"
bind9-dnsutils

Package

Name
bind9-dnsutils
Purl
pkg:deb/tuxcare/bind9-dnsutils?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785886464.json"
bind9-doc

Package

Name
bind9-doc
Purl
pkg:deb/tuxcare/bind9-doc?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785886464.json"
bind9-host

Package

Name
bind9-host
Purl
pkg:deb/tuxcare/bind9-host?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785886464.json"
bind9-libs

Package

Name
bind9-libs
Purl
pkg:deb/tuxcare/bind9-libs?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785886464.json"
bind9-utils

Package

Name
bind9-utils
Purl
pkg:deb/tuxcare/bind9-utils?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785886464.json"
bind9utils

Package

Name
bind9utils
Purl
pkg:deb/tuxcare/bind9utils?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785886464.json"
dnsutils

Package

Name
dnsutils
Purl
pkg:deb/tuxcare/dnsutils?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1:9.18.30-0ubuntu0.20.04.2+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1785886464.json"