轉發 台灣電腦網路危機處理暨協調中心 資安訊息警訊 TWCERTCC-200-202604-00000001

[內容說明]
近日Internet Systems Consortium (ISC)針對BIND發布重大資安公告(CVE-2026-3104，CVSS：7.5)，此漏洞可透過精心設計的域名，造成BIND解析器中記憶體洩漏。

[影響平台]
BIND 9.20.0 至 9.20.20版本
BIND 9.21.0 至 9.21.19版本
BIND 9.20.9-S1 至 9.20.20-S1版本

[建議措施]
根據官方網站釋出的解決方式進行修補：https://kb.isc.org/docs/cve-2026-3104

[參考資料]
1. https://www.twcert.org.tw/tw/cp-169-10818-cb2ee-1.html

Forwarded from Taiwan Computer Network Crisis Management and Coordination Center: Cybersecurity Warning TWCERTCC-200-202604-00000001

[Content Description]
Recently, the Internet Systems Consortium (ISC) issued a major cybersecurity advisory for BIND (CVE-2026-3104, CVSS: 7.5). This vulnerability can cause memory leakage in the BIND resolver through carefully crafted domain names.

[Affected Platforms]
BIND versions 9.20.0 to 9.20.20
BIND versions 9.21.0 to 9.21.19
BIND versions 9.20.9-S1 to 9.20.20-S1

[Recommended Actions]
Patch according to the solutions released on the official website: https://kb.isc.org/docs/cve-2026-3104

[References]
1. https://www.twcert.org.tw/tw/cp-169-10818-cb2ee-1.html