7.5
Élevée
CVE-2024-4076 Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result…
Description
Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BIND 9 9.19 | 9.19.0 → 9.19.24 | Pas de correctif indiqué |
| BIND 9 9.18 | 9.18.0 → 9.18.27 | Pas de correctif indiqué |
| BIND 9 9.16 | 9.16.13-S1 → 9.16.50 | Pas de correctif indiqué |
| BIND 9 9.11 | 9.11.33-S1 → 9.11.37-S1 | Pas de correctif indiqué |
| BIND 9.19 | 9.19.0 → 9.19.24 | Pas de correctif indiqué |
| BIND 9.18 | 9.18.0 → 9.18.27 | Pas de correctif indiqué |
| BIND 9.16 | 9.16.13-s1 → 9.16.50 | Pas de correctif indiqué |
| BIND 9.11 | 9.11.33-s1 → 9.11.37-s1 | Pas de correctif indiqué |
Références
- CVE-2024-4076 kb.isc.org
- www.openwall.com www.openwall.com
- www.openwall.com www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de BIND 9
Les 87 CVE de BIND 9 →
CVE-2026-97313
A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query (RD=0) may…
7.5
Élevée
CVE-2026-96888
A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with an…
7.5
Élevée
CVE-2026-94300
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "`named`"
8.1
Élevée
CVE-2026-19630
In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with…
7.5
Élevée