CVE-2024-4076

Published: Jul 23, 2024Modified: Jun 17, 2026Deferred

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: security-officer@isc.org (Secondary)

Description

Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.

Related CWEs

Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

References (6)

http://www.openwall.com/lists/oss-security/2024/07/23/1

Source: security-officer@isc.org

http://www.openwall.com/lists/oss-security/2024/07/31/2

Source: security-officer@isc.org

https://kb.isc.org/docs/cve-2024-4076

Source: security-officer@isc.org

http://www.openwall.com/lists/oss-security/2024/07/23/1

Source: af854a3a-2127-422b-91ae-364da2661108

https://kb.isc.org/docs/cve-2024-4076

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.netapp.com/advisory/ntap-20240731-0001/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.