CVE-2024-1737

BIND's database will be slow if a very large number of RRs exist at the same name

High · published July 23, 2024

CVSS v3.1
7.5
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name.

This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.4-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02114 · 81.7th percentile
Published
2024-07-23T14:34Z
EPSS history
Timeline
  • 23 JUL 14:34Z
    BIND's database will be slow if a very large number of RRs exist at the same name
    cvelistv5