7.5
High
CVE-2024-4076 Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result…
Description
Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIND 9 9.19 | 9.19.0 → 9.19.24 | No fix stated |
| BIND 9 9.18 | 9.18.0 → 9.18.27 | No fix stated |
| BIND 9 9.16 | 9.16.13-S1 → 9.16.50 | No fix stated |
| BIND 9 9.11 | 9.11.33-S1 → 9.11.37-S1 | No fix stated |
| BIND 9.19 | 9.19.0 → 9.19.24 | No fix stated |
| BIND 9.18 | 9.18.0 → 9.18.27 | No fix stated |
| BIND 9.16 | 9.16.13-s1 → 9.16.50 | No fix stated |
| BIND 9.11 | 9.11.33-s1 → 9.11.37-s1 | No fix stated |
Other CVEs of BIND 9
The 87 CVEs of BIND 9 →
CVE-2026-97313
A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may…
7.5
High
CVE-2026-96888
A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an…
7.5
High
CVE-2026-94300
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`"
8.1
High
CVE-2026-19630
In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with…
7.5
High