What is GHSA-89q8-qc36-7m58?

GHSA-89q8-qc36-7m58 is a security advisory published by GitHub Security Advisories with High severity. If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and...

Which CVE IDs does GHSA-89q8-qc36-7m58 cover?

GHSA-89q8-qc36-7m58 covers the following CVE IDs: CVE-2026-13204. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-89q8-qc36-7m58?

GHSA-89q8-qc36-7m58 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-89q8-qc36-7m58HighCVSS 7.5

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and...

Vendor

GitHub Security Advisories

Published

July 22, 2026

Last Modified

July 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-13204 →

📋 Description

If a provably insecure domain is covered by both an NSEC and NSEC3 record at the parent, and there exist an RRSIG for only one of these types, then BIND may exit unexpectedly with an assertion while validating this proof. This issue affects BIND 9 versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.24-S1.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-13204
https://downloads.isc.org/isc/bind9/9.20.26
https://downloads.isc.org/isc/bind9/9.21.24
https://kb.isc.org/docs/cve-2026-13204
https://github.com/advisories/GHSA-89q8-qc36-7m58