CVE-2026-76163

A flaw was found in BIND. A remote attacker can exploit this vulnerability by sending a specially crafted TKEY query to a BIND server configured without a global 'options' block in its 'named.conf' file. This can lead to an assertion failure, causing the BIND program to unexpectedly terminate. This results in a Denial of Service (DoS), making the affected server unavailable.

This is an Important denial of service flaw in BIND. If the named.conf file lacks a global options block, a remote attacker can send a crafted TKEY query, leading to an assertion failure and unexpected program termination. This issue impacts the availability of the DNS service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, ensure that the BIND configuration file (named.conf) includes a global options block. If no such block exists, adding an empty options {} block will prevent the vulnerability. After modifying named.conf, the named service must be restarted for the changes to take effect. This may temporarily interrupt DNS resolution.