CVE-2024-4076

HIGH

BIND 9.16.13-9.16.50, 9.18.0-9.18.27, 9.19.0-9.19.24 - Reachable Assertion via Stale Data Lookup

Title source: llm
STIX 2.1

Description

Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.

References (4)

Core 4

Scores

CVSS v3 7.5
EPSS 0.0211
EPSS Percentile 79.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-617
Status published
Products (6)
ISC/BIND 9 9.11.33-S1 - 9.11.37-S1
ISC/BIND 9 9.16.13 - 9.16.50
ISC/BIND 9 9.16.13-S1 - 9.16.50-S1
ISC/BIND 9 9.18.0 - 9.18.27
ISC/BIND 9 9.18.11-S1 - 9.18.27-S1
ISC/BIND 9 9.19.0 - 9.19.24
Published Jul 23, 2024
Tracked Since Feb 18, 2026