CVE-2024-4076

Assertion failure when serving both stale cache data and authoritative zone content

High · published July 23, 2024

CVSS v3.1
7.5
EPSS
2%
Percentile
81.6
In the wild
Unconfirmed
What it is

Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure.

This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02111 · 81.6th percentile
Published
2024-07-23T14:40Z
EPSS history
Timeline
  • 23 JUL 14:40Z
    Assertion failure when serving both stale cache data and authoritative zone content
    cvelistv5