This page tracks the Alpine Linux fix status. The vulnerability itself is described on the main CVE page.
View CVE-2026-10723 →
ALPINE-CVE-2026-10723
BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affec...
Original description
The description as published by the source.
BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.
This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Alpine:v3.22
bind
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.26-r0"}]}]
Alpine:v3.23
bind
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.26-r0"}]}]
Alpine:v3.24
bind
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.20.26-r0"}]}]
References
- advisory security.alpinelinux.org