CVE-2024-4076

Fixed in a distro release EPSS 2%CVSS 7.5

Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.

Published 2024-07-23 · CVE record · OSV

Products: ISC BIND 9, ISC BIND

Distro releases

Release	Package	Fixed in
AlmaLinux:8	bind9.16	32:9.16.23-0.22.el8_10
AlmaLinux:8	bind9.16-chroot	32:9.16.23-0.22.el8_10
AlmaLinux:8	bind9.16-devel	32:9.16.23-0.22.el8_10
AlmaLinux:8	bind9.16-dnssec-utils	32:9.16.23-0.22.el8_10
AlmaLinux:8	bind9.16-doc	32:9.16.23-0.22.el8_10
AlmaLinux:8	bind9.16-libs	32:9.16.23-0.22.el8_10
AlmaLinux:8	bind9.16-license	32:9.16.23-0.22.el8_10
AlmaLinux:8	bind9.16-utils	32:9.16.23-0.22.el8_10
AlmaLinux:8	python3-bind9.16	32:9.16.23-0.22.el8_10
AlmaLinux:9	bind	32:9.16.23-18.el9_4.6
AlmaLinux:9	bind-chroot	32:9.16.23-18.el9_4.6
AlmaLinux:9	bind-devel	32:9.16.23-18.el9_4.6
AlmaLinux:9	bind-dnssec-doc	32:9.16.23-18.el9_4.6
AlmaLinux:9	bind-dnssec-utils	32:9.16.23-18.el9_4.6
AlmaLinux:9	bind-doc	32:9.16.23-18.el9_4.6
AlmaLinux:9	bind-dyndb-ldap	11.9-10.el9_4.alma.1
AlmaLinux:9	bind-libs	32:9.16.23-18.el9_4.6
AlmaLinux:9	bind-license	32:9.16.23-18.el9_4.6
AlmaLinux:9	bind-utils	32:9.16.23-18.el9_4.6
AlmaLinux:9	python3-bind	32:9.16.23-18.el9_4.6
Alpine:v3.17	bind	9.18.31-r0
Alpine:v3.18	bind	9.18.31-r0
Alpine:v3.19	bind	9.18.31-r0
Alpine:v3.20	bind	9.18.31-r0
Alpine:v3.21	bind	9.18.28-r0
Alpine:v3.22	bind	9.18.28-r0
Alpine:v3.23	bind	9.18.28-r0
Alpine:v3.24	bind	9.18.28-r0
Chainguard	bind	9.18.28-r0
Chainguard	bind-dev	9.18.28-r0
Chainguard	bind-dnssec-root	9.18.28-r0
Chainguard	bind-dnssec-tools	9.18.28-r0
Chainguard	bind-doc	9.18.28-r0
Chainguard	bind-libs	9.18.28-r0
Chainguard	bind-plugins	9.18.28-r0
Chainguard	bind-tools	9.18.28-r0
Debian:11	bind9	1:9.16.50-1~deb11u1
Debian:12	bind9	1:9.18.28-1~deb12u1
Debian:13	bind9	1:9.20.0-1
Debian:14	bind9	1:9.20.0-1
Red Hat:enterprise_linux:8	bind9.16	32:9.16.23-0.22.el8_10
Red Hat:enterprise_linux:8	bind9.16-chroot	32:9.16.23-0.22.el8_10
Red Hat:enterprise_linux:8	bind9.16-debuginfo	32:9.16.23-0.22.el8_10
Red Hat:enterprise_linux:8	bind9.16-debugsource	32:9.16.23-0.22.el8_10
Red Hat:enterprise_linux:8	bind9.16-devel	32:9.16.23-0.22.el8_10
Red Hat:enterprise_linux:8	bind9.16-dnssec-utils	32:9.16.23-0.22.el8_10
Red Hat:enterprise_linux:8	bind9.16-dnssec-utils-debuginfo	32:9.16.23-0.22.el8_10
Red Hat:enterprise_linux:8	bind9.16-doc	32:9.16.23-0.22.el8_10
Red Hat:enterprise_linux:8	bind9.16-libs	32:9.16.23-0.22.el8_10
Red Hat:enterprise_linux:8	bind9.16-libs-debuginfo	32:9.16.23-0.22.el8_10
Red Hat:enterprise_linux:8	bind9.16-license	32:9.16.23-0.22.el8_10
Red Hat:enterprise_linux:8	bind9.16-utils	32:9.16.23-0.22.el8_10
Red Hat:enterprise_linux:8	bind9.16-utils-debuginfo	32:9.16.23-0.22.el8_10
Red Hat:enterprise_linux:8	python3-bind9.16	32:9.16.23-0.22.el8_10
Red Hat:enterprise_linux:9	bind	32:9.16.23-18.el9_4.6
Red Hat:enterprise_linux:9	bind-chroot	32:9.16.23-18.el9_4.6
Red Hat:enterprise_linux:9	bind-debuginfo	32:9.16.23-18.el9_4.6
Red Hat:enterprise_linux:9	bind-debugsource	32:9.16.23-18.el9_4.6
Red Hat:enterprise_linux:9	bind-devel	32:9.16.23-18.el9_4.6
Red Hat:enterprise_linux:9	bind-dnssec-doc	32:9.16.23-18.el9_4.6
Red Hat:enterprise_linux:9	bind-dnssec-utils	32:9.16.23-18.el9_4.6
Red Hat:enterprise_linux:9	bind-dnssec-utils-debuginfo	32:9.16.23-18.el9_4.6
Red Hat:enterprise_linux:9	bind-doc	32:9.16.23-18.el9_4.6
Red Hat:enterprise_linux:9	bind-dyndb-ldap	0:11.9-10.el9_4
Red Hat:enterprise_linux:9	bind-dyndb-ldap-debuginfo	0:11.9-10.el9_4
Red Hat:enterprise_linux:9	bind-dyndb-ldap-debugsource	0:11.9-10.el9_4
Red Hat:enterprise_linux:9	bind-libs	32:9.16.23-18.el9_4.6
Red Hat:enterprise_linux:9	bind-libs-debuginfo	32:9.16.23-18.el9_4.6
Red Hat:enterprise_linux:9	bind-license	32:9.16.23-18.el9_4.6
Red Hat:enterprise_linux:9	bind-utils	32:9.16.23-18.el9_4.6
Red Hat:enterprise_linux:9	bind-utils-debuginfo	32:9.16.23-18.el9_4.6
Red Hat:enterprise_linux:9	python3-bind	32:9.16.23-18.el9_4.6
Red Hat:rhel_aus:8.6	bind9.16	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_aus:8.6	bind9.16-chroot	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_aus:8.6	bind9.16-debuginfo	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_aus:8.6	bind9.16-debugsource	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_aus:8.6	bind9.16-dnssec-utils-debuginfo	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_aus:8.6	bind9.16-libs	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_aus:8.6	bind9.16-libs-debuginfo	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_aus:8.6	bind9.16-license	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_aus:8.6	bind9.16-utils	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_aus:8.6	bind9.16-utils-debuginfo	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_e4s:8.6	bind9.16	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_e4s:8.6	bind9.16-chroot	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_e4s:8.6	bind9.16-debuginfo	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_e4s:8.6	bind9.16-debugsource	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_e4s:8.6	bind9.16-dnssec-utils-debuginfo	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_e4s:8.6	bind9.16-libs	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_e4s:8.6	bind9.16-libs-debuginfo	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_e4s:8.6	bind9.16-license	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_e4s:8.6	bind9.16-utils	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_e4s:8.6	bind9.16-utils-debuginfo	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_e4s:9.0	bind	32:9.16.23-1.el9_0.7
Red Hat:rhel_e4s:9.0	bind-chroot	32:9.16.23-1.el9_0.7
Red Hat:rhel_e4s:9.0	bind-debuginfo	32:9.16.23-1.el9_0.7
Red Hat:rhel_e4s:9.0	bind-debugsource	32:9.16.23-1.el9_0.7
Red Hat:rhel_e4s:9.0	bind-dnssec-doc	32:9.16.23-1.el9_0.7
Red Hat:rhel_e4s:9.0	bind-dnssec-utils	32:9.16.23-1.el9_0.7
Red Hat:rhel_e4s:9.0	bind-dnssec-utils-debuginfo	32:9.16.23-1.el9_0.7
Red Hat:rhel_e4s:9.0	bind-dyndb-ldap	0:11.9-7.el9_0.3
Red Hat:rhel_e4s:9.0	bind-dyndb-ldap-debuginfo	0:11.9-7.el9_0.3
Red Hat:rhel_e4s:9.0	bind-dyndb-ldap-debugsource	0:11.9-7.el9_0.3
Red Hat:rhel_e4s:9.0	bind-libs	32:9.16.23-1.el9_0.7
Red Hat:rhel_e4s:9.0	bind-libs-debuginfo	32:9.16.23-1.el9_0.7
Red Hat:rhel_e4s:9.0	bind-license	32:9.16.23-1.el9_0.7
Red Hat:rhel_e4s:9.0	bind-utils	32:9.16.23-1.el9_0.7
Red Hat:rhel_e4s:9.0	bind-utils-debuginfo	32:9.16.23-1.el9_0.7
Red Hat:rhel_e4s:9.0	python3-bind	32:9.16.23-1.el9_0.7
Red Hat:rhel_eus:8.8	bind9.16	32:9.16.23-0.14.el8_8.5
Red Hat:rhel_eus:8.8	bind9.16-chroot	32:9.16.23-0.14.el8_8.5
Red Hat:rhel_eus:8.8	bind9.16-debuginfo	32:9.16.23-0.14.el8_8.5
Red Hat:rhel_eus:8.8	bind9.16-debugsource	32:9.16.23-0.14.el8_8.5
Red Hat:rhel_eus:8.8	bind9.16-devel	32:9.16.23-0.14.el8_8.5
Red Hat:rhel_eus:8.8	bind9.16-dnssec-utils	32:9.16.23-0.14.el8_8.5
Red Hat:rhel_eus:8.8	bind9.16-dnssec-utils-debuginfo	32:9.16.23-0.14.el8_8.5
Red Hat:rhel_eus:8.8	bind9.16-doc	32:9.16.23-0.14.el8_8.5
Red Hat:rhel_eus:8.8	bind9.16-libs	32:9.16.23-0.14.el8_8.5
Red Hat:rhel_eus:8.8	bind9.16-libs-debuginfo	32:9.16.23-0.14.el8_8.5
Red Hat:rhel_eus:8.8	bind9.16-license	32:9.16.23-0.14.el8_8.5
Red Hat:rhel_eus:8.8	bind9.16-utils	32:9.16.23-0.14.el8_8.5
Red Hat:rhel_eus:8.8	bind9.16-utils-debuginfo	32:9.16.23-0.14.el8_8.5
Red Hat:rhel_eus:8.8	python3-bind9.16	32:9.16.23-0.14.el8_8.5
Red Hat:rhel_eus:9.2	bind	32:9.16.23-11.el9_2.5
Red Hat:rhel_eus:9.2	bind-chroot	32:9.16.23-11.el9_2.5
Red Hat:rhel_eus:9.2	bind-debuginfo	32:9.16.23-11.el9_2.5
Red Hat:rhel_eus:9.2	bind-debugsource	32:9.16.23-11.el9_2.5
Red Hat:rhel_eus:9.2	bind-devel	32:9.16.23-11.el9_2.5
Red Hat:rhel_eus:9.2	bind-dnssec-doc	32:9.16.23-11.el9_2.5
Red Hat:rhel_eus:9.2	bind-dnssec-utils	32:9.16.23-11.el9_2.5
Red Hat:rhel_eus:9.2	bind-dnssec-utils-debuginfo	32:9.16.23-11.el9_2.5
Red Hat:rhel_eus:9.2	bind-doc	32:9.16.23-11.el9_2.5
Red Hat:rhel_eus:9.2	bind-dyndb-ldap	0:11.9-8.el9_2.3
Red Hat:rhel_eus:9.2	bind-dyndb-ldap-debuginfo	0:11.9-8.el9_2.3
Red Hat:rhel_eus:9.2	bind-dyndb-ldap-debugsource	0:11.9-8.el9_2.3
Red Hat:rhel_eus:9.2	bind-libs	32:9.16.23-11.el9_2.5
Red Hat:rhel_eus:9.2	bind-libs-debuginfo	32:9.16.23-11.el9_2.5
Red Hat:rhel_eus:9.2	bind-license	32:9.16.23-11.el9_2.5
Red Hat:rhel_eus:9.2	bind-utils	32:9.16.23-11.el9_2.5
Red Hat:rhel_eus:9.2	bind-utils-debuginfo	32:9.16.23-11.el9_2.5
Red Hat:rhel_eus:9.2	python3-bind	32:9.16.23-11.el9_2.5
Red Hat:rhel_tus:8.6	bind9.16	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_tus:8.6	bind9.16-chroot	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_tus:8.6	bind9.16-debuginfo	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_tus:8.6	bind9.16-debugsource	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_tus:8.6	bind9.16-dnssec-utils-debuginfo	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_tus:8.6	bind9.16-libs	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_tus:8.6	bind9.16-libs-debuginfo	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_tus:8.6	bind9.16-license	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_tus:8.6	bind9.16-utils	32:9.16.23-0.7.el8_6.6
Red Hat:rhel_tus:8.6	bind9.16-utils-debuginfo	32:9.16.23-0.7.el8_6.6
Rocky Linux:8	bind9.16	2:9.16.23-0.22.el8_10
Rocky Linux:9	bind	2:9.16.23-18.el9_4.6
Rocky Linux:9	bind-dyndb-ldap	0:11.9-10.el9_4
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS	bind	9.16.50-150400.5.43.1
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS	bind	9.16.50-150400.5.43.1
SUSE:Linux Enterprise Micro 5.5	bind	9.16.50-150500.8.21.1
SUSE:Linux Enterprise Module for Basesystem 15 SP5	bind	9.16.50-150500.8.21.1
SUSE:Linux Enterprise Module for Basesystem 15 SP6	bind	9.18.28-150600.3.3.1
SUSE:Linux Enterprise Module for Server Applications 15 SP5	bind	9.16.50-150500.8.21.1
SUSE:Linux Enterprise Module for Server Applications 15 SP6	bind	9.18.28-150600.3.3.1
SUSE:Linux Enterprise Server 15 SP4-LTSS	bind	9.16.50-150400.5.43.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP4	bind	9.16.50-150400.5.43.1
SUSE:Manager Proxy 4.3	bind	9.16.50-150400.5.43.1
SUSE:Manager Server 4.3	bind	9.16.50-150400.5.43.1
Ubuntu:20.04:LTS	bind9	1:9.18.28-0ubuntu0.20.04.1
Ubuntu:22.04:LTS	bind9	1:9.18.28-0ubuntu0.22.04.1
Ubuntu:24.04:LTS	bind9	1:9.18.28-0ubuntu0.24.04.1
Wolfi	bind	9.18.28-r0
Wolfi	bind-dev	9.18.28-r0
Wolfi	bind-dnssec-root	9.18.28-r0
Wolfi	bind-dnssec-tools	9.18.28-r0
Wolfi	bind-doc	9.18.28-r0
Wolfi	bind-libs	9.18.28-r0
Wolfi	bind-plugins	9.18.28-r0
Wolfi	bind-tools	9.18.28-r0
openSUSE:Leap 15.5	bind	9.16.50-150500.8.21.1
openSUSE:Leap 15.6	bind	9.18.28-150600.3.3.1
openSUSE:Tumbleweed	bind	9.20.0-1.1