THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-3039 (HIGH 7.5) — BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments

[NVD] CVE-2026-3039 (HIGH 7.5) — BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments

lownvdPublished 2026-05-20

CVE-2026-3039 CVSS: 7.5 HIGH Published: 2026-05-20T13:16:23.647

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or Kerberos-secured DNS environments. This issue a

Indicators of compromise

CVE-2026-3039cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-3039