Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-4076

Assertion failure when serving both stale cache data and authoritative zone content

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
isc

Description

Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ISC BIND 9

Default version status: unaffected

  • 9.16.13 to ≤ 9.16.50affected
  • 9.18.0 to ≤ 9.18.27affected
  • 9.19.0 to ≤ 9.19.24affected
  • 9.11.33-S1 to ≤ 9.11.37-S1affected
  • 9.16.13-S1 to ≤ 9.16.50-S1affected
  • 9.18.11-S1 to ≤ 9.18.27-S1affected

References