Stale Data and Assertion Failures in BIND 9 Versions

CVE-2024-4076
7.5HIGH

Key Information

Vendor
Isc
Status
Bind 9
Vendor
CVE Published:
23 July 2024

Badges

đź‘ľ Exploit Existsđź“° News Worthy

Summary

Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.

Affected Version(s)

BIND 9 <= 9.16.50

BIND 9 <= 9.18.27

BIND 9 <= 9.19.24

News Articles

favicon imageDefend Edge

ISC Releases Security Advisories for BIND 9 - Defend Edge

The Internet Systems Consortium (ISC) released security advisories to address vulnerabilities affecting multiple versions of ISC’s Berkeley Internet Name Domain (BIND) 9. A cyber threat actor could exploit one of these vulnerabilities to cause a denial-of-service condition. CISA encourages users and...

4 months ago

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • First article discovered by Defend Edge

  • Vulnerability published.

  • Vulnerability Reserved.

  • đź‘ľ

    Exploit exists.

Collectors

NVD DatabaseMitre Database1 News Article(s)

Credit

ISC would like to thank Daniel Stränger for bringing this vulnerability to our attention.
.