CVEvulnerability
CVE-2024-1737
7.5 HIGH
Official page ↗
- Status
- Deferred
- Published
- 2024-07-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-770
Description
Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name.
This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.4-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.
Related
Weakness · CWE (1)
- CWE-770 Allocation of Resources Without Limits or Throttling weakness
References
- http://www.openwall.com/lists/oss-security/2024/07/23/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2024/07/31/2 www.openwall.com
- https://kb.isc.org/docs/cve-2024-1737 kb.isc.org
- https://kb.isc.org/docs/rrset-limits-in-zones kb.isc.org
- http://www.openwall.com/lists/oss-security/2024/07/23/1 www.openwall.com
- https://kb.isc.org/docs/cve-2024-1737 kb.isc.org
- https://kb.isc.org/docs/rrset-limits-in-zones kb.isc.org
- https://security.netapp.com/advisory/ntap-20240731-0003/ security.netapp.com