high7.5
CVE-2024-1737
Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance…
Impact
Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.4-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.
Affected products
| Product | Affected versions |
|---|---|
| BIND 9 Versions 9.11.0 | through 9.11.37 |
| 9.16.0 | through 9.16.50 |
| 9.18.0 | through 9.18.27 |
| 9.19.0 | through 9.19.24 |
| 9.11.4-S1 | through 9.11.37-S1 |
| 9.16.8-S1 | through 9.16.50-S1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2024/07/23/1
- http://www.openwall.com/lists/oss-security/2024/07/31/2
- https://kb.isc.org/docs/cve-2024-1737
- https://kb.isc.org/docs/rrset-limits-in-zones
- http://www.openwall.com/lists/oss-security/2024/07/23/1
- https://kb.isc.org/docs/cve-2024-1737
- https://kb.isc.org/docs/rrset-limits-in-zones
- https://security.netapp.com/advisory/ntap-20240731-0003/