7.5
High
CVE-2024-1737 Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any…
Description
Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.4-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIND 9 9.19 | 9.19.0 → 9.19.24 | No fix stated |
| BIND 9 9.18 | 9.18.0 → 9.18.27 | No fix stated |
| BIND 9 9.16 | 9.16.0 → 9.16.50 | No fix stated |
| BIND 9 9.11 | 9.11.0 → 9.11.37 | No fix stated |
| BIND 9.19 | 9.19.0 → latest | No fix stated |
| BIND 9.18 | 9.18.0 → latest | No fix stated |
| BIND 9.16 | 9.16.0 → 9.19.24 | No fix stated |
| BIND 9.11 | 9.11.0 → 9.16.50 | No fix stated |
References
- CVE-2024-1737 kb.isc.org
- RRset limits in zones kb.isc.org
- www.openwall.com www.openwall.com
- www.openwall.com www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of BIND 9
The 87 CVEs of BIND 9 →
CVE-2026-97313
A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may…
7.5
High
CVE-2026-96888
A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an…
7.5
High
CVE-2026-94300
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`"
8.1
High
CVE-2026-19630
In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with…
7.5
High