Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2024-1737
HistoryJul 23, 2024 - 12:00 a.m.

CVE-2024-1737

2024-07-2300:00:00
ubuntu.com
ubuntu.com
4
bind
database
isc-dhcp

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

20.9%

JSON

Resolver caches and authoritative zone databases that hold significant
numbers of RRs for the same hostname (of any RTYPE) can suffer from
degraded performance as content is being added or updated, and also when
handling client queries for this name.
This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through
9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.4-S1 through
9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through
9.18.27-S1.

Notes

Author Note
alexmurray As of isc-dhcp-4.4.3-1, isc-dhcp vendors bind9 libs
mdeslaur in focal and jammy, isc-dhcp uses the bind9-libs package This is unlikely to affect isc-dhcp’s use of bind9-libs and the vendored bind9 libs, marking as negligible

Related

openvas 15
debiancve 1
redhatcve 1
wolfi 1
vulnrichment 1
f5 1
nessus 37
cvelist 1
cbl_mariner 3
alpinelinux 1
veracode 1
nvd 1
cve 1
osv 9
ubuntu 3
redhat 27
almalinux 3
amazon 1
oraclelinux 3
rocky 1
redos 1
fedora 4
slackware 1
ibm 2
thn 1
photon 3
openvas
openvas
ISC BIND DoS Vulnerability (CVE-2024-1737) - Windows
2024-07-24 00:00:00
ISC BIND DoS Vulnerability (CVE-2024-1737) - Linux
2024-07-24 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:2811-1)
2024-08-07 00:00:00
debiancve
debiancve
CVE-2024-1737
2024-07-23 15:15:03
redhatcve
redhatcve
CVE-2024-1737
2024-07-23 23:36:34
wolfi
wolfi
CVE-2024-1737 vulnerabilities
2024-09-19 09:11:50
vulnrichment
vulnrichment
CVE-2024-1737 BIND's database will be slow if a very large number of RRs exist at the same name
2024-07-23 14:34:09
f5
f5
K000140732: BIND vulnerability CVE-2024-1737
2024-08-17 00:00:00
nessus
nessus
F5 Networks BIG-IP : BIND vulnerability (K000140732)
2024-08-17 00:00:00
CBL Mariner 2.0 Security Update: bind / dhcp (CVE-2024-1737)
2024-08-19 00:00:00
RHEL 8 : bind (RHSA-2024:5838)
2024-08-26 00:00:00
cvelist
cvelist
CVE-2024-1737 BIND's database will be slow if a very large number of RRs exist at the same name
2024-07-23 14:34:09
cbl_mariner
cbl_mariner
CVE-2024-1737 affecting package bind for versions less than 9.20.0-1
2024-08-02 00:50:42
CVE-2024-1737 affecting package bind for versions less than 9.16.50-1
2024-08-18 14:44:42
CVE-2024-1737 affecting package dhcp for versions less than 4.4.3.P1-2
2024-08-18 14:44:42
alpinelinux
alpinelinux
CVE-2024-1737
2024-07-23 15:15:03
veracode
veracode
Denial Of Service (DoS)
2024-07-24 07:37:16
nvd
nvd
CVE-2024-1737
2024-07-23 15:15:03
cve
cve
CVE-2024-1737
2024-07-23 15:15:03
osv
osv
CVE-2024-1737
2024-07-23 15:15:03
Important: bind security update
2024-08-19 00:00:00
bind9 vulnerabilities
2024-08-15 19:09:34
ubuntu
ubuntu
Bind vulnerabilities
2024-08-01 00:00:00
Bind vulnerabilities
2024-08-15 00:00:00
Bind vulnerabilities
2024-07-23 00:00:00
redhat
redhat
(RHSA-2024:5524) Important: bind security update
2024-08-19 00:59:37
(RHSA-2024:5908) Important: bind security update
2024-08-27 18:11:46
(RHSA-2024:5894) Important: bind security update
2024-08-27 11:08:26
almalinux
almalinux
Important: bind security update
2024-08-19 00:00:00
Important: bind and bind-dyndb-ldap security update
2024-08-15 00:00:00
Important: bind9.16 security update
2024-08-14 00:00:00
amazon
amazon
Important: bind
2024-08-01 03:01:00
oraclelinux
oraclelinux
bind security update
2024-08-19 00:00:00
bind9.16 security update
2024-08-14 00:00:00
bind and bind-dyndb-ldap security update
2024-08-13 00:00:00
rocky
rocky
bind and bind-dyndb-ldap security update
2024-08-21 14:53:26
redos
redos
ROS-20240807-10
2024-08-07 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: bind-9.18.28-2.fc39
2024-08-17 01:51:06
[SECURITY] Fedora 40 Update: bind-9.18.28-2.fc40
2024-08-03 01:50:41
[SECURITY] Fedora 40 Update: bind-dyndb-ldap-11.10-29.fc40
2024-08-03 01:50:42
slackware
slackware
[slackware-security] bind
2024-07-23 19:08:45
ibm
ibm
Security Bulletin: ISC BIND on IBM i is vulnerable to a remote attacker causing a denial of service due to multiple vulnerabilities.
2024-09-13 16:07:40
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-09-18 10:14:03
thn
thn
CISA Warns of Exploitable Vulnerabilities in Popular BIND 9 DNS Software
2024-07-25 05:30:00
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0657
2024-07-24 00:00:00
Important Photon OS Security Update - PHSA-2024-3.0-0773
2024-07-24 00:00:00
Critical Photon OS Security Update - PHSA-2024-5.0-0330
2024-07-24 00:00:00

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

20.9%

JSON
Related for UB:CVE-2024-1737
openvas15debiancve1redhatcve1wolfi1vulnrichment1f51nessus37cvelist1cbl_mariner3alpinelinux1veracode1nvd1cve1osv9ubuntu3redhat27almalinux3amazon1oraclelinux3rocky1redos1fedora4slackware1ibm2thn1photon3