« Volver al listado

CVE-2024-1737

Estado: AplazadaAlta (7.5)—

Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.4-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

ISC — BindAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-1737",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-1737",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-07-26T17:27:11.436620Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-officer@isc.org",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-officer@isc.org",
      "affectedData": [
        {
          "vendor": "ISC",
          "product": "BIND 9",
          "versions": [
            {
              "status": "affected",
              "version": "9.11.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.11.37"
            },
            {
              "status": "affected",
              "version": "9.16.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.16.50"
            },
            {
              "status": "affected",
              "version": "9.18.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.18.27"
            },
            {
              "status": "affected",
              "version": "9.19.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.19.24"
            },
            {
              "status": "affected",
              "version": "9.11.4-S1",
              "versionType": "custom",
              "lessThanOrEqual": "9.11.37-S1"
            },
            {
              "status": "affected",
              "version": "9.16.8-S1",
              "versionType": "custom",
              "lessThanOrEqual": "9.16.50-S1"
            },
            {
              "status": "affected",
              "version": "9.18.11-S1",
              "versionType": "custom",
              "lessThanOrEqual": "9.18.27-S1"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:isc:bind:9.11.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:isc:bind:9.11.4:s1:*:*:supported_preview:*:*:*",
            "cpe:2.3:a:isc:bind:9.16.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:isc:bind:9.16.8:s1:*:*:*:*:*:*",
            "cpe:2.3:a:isc:bind:9.18.0:*:*:*:-:*:*:*",
            "cpe:2.3:a:isc:bind:9.18.11:s1:*:*:supported_preview:*:*:*",
            "cpe:2.3:a:isc:bind:9.19.0:*:*:*:-:*:*:*"
          ],
          "vendor": "isc",
          "product": "bind",
          "versions": [
            {
              "status": "affected",
              "version": "9.11.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.11.37"
            },
            {
              "status": "affected",
              "version": "9.11.4",
              "versionType": "custom",
              "lessThanOrEqual": "9.16.50"
            },
            {
              "status": "affected",
              "version": "9.16.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.18.27"
            },
            {
              "status": "affected",
              "version": "9.16.8",
              "versionType": "custom",
              "lessThanOrEqual": "9.19.24"
            },
            {
              "status": "affected",
              "version": "9.18.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.11.37_s1"
            },
            {
              "status": "affected",
              "version": "9.18.11",
              "versionType": "custom",
              "lessThanOrEqual": "9.16.50_s1"
            },
            {
              "status": "affected",
              "version": "9.19.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.18.27_s1"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-07-23T15:15:03.740",
  "references": [
    {
      "url": "http://www.openwall.com/lists/oss-security/2024/07/23/1",
      "source": "security-officer@isc.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2024/07/31/2",
      "source": "security-officer@isc.org"
    },
    {
      "url": "https://kb.isc.org/docs/cve-2024-1737",
      "source": "security-officer@isc.org"
    },
    {
      "url": "https://kb.isc.org/docs/rrset-limits-in-zones",
      "source": "security-officer@isc.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2024/07/23/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.isc.org/docs/cve-2024-1737",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.isc.org/docs/rrset-limits-in-zones",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20240731-0003/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name.\nThis issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.4-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1."
    },
    {
      "lang": "es",
      "value": " Las cachés de resolución y las bases de datos de zonas autorizadas que contienen cantidades significativas de RR para el mismo nombre de host (de cualquier RTYPE) pueden sufrir un rendimiento degradado a medida que se agrega o actualiza contenido, y también al manejar consultas de clientes para este nombre. Este problema afecta a las versiones de BIND 9, 9.11.0 a 9.11.37, 9.16.0 a 9.16.50, 9.18.0 a 9.18.27, 9.19.0 a 9.19.24, 9.11.4-S1 a 9.11.37-S1. 9.16.8-S1 a 9.16.50-S1 y 9.18.11-S1 a 9.18.27-S1."
    }
  ],
  "lastModified": "2026-06-17T07:04:53.993",
  "sourceIdentifier": "security-officer@isc.org"
}