« Volver al listado

CVE-2024-1975

Estado: AplazadaAlta (7.5)—

If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of SIG(0) signed requests. This issue affects BIND 9 versions 9.0.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.49-S1, and 9.18.11-S1 through 9.18.27-S1.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

ISC — BindAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-1975",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-1975",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-07-23T17:12:04.527878Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-officer@isc.org",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-officer@isc.org",
      "affectedData": [
        {
          "vendor": "ISC",
          "product": "BIND 9",
          "versions": [
            {
              "status": "affected",
              "version": "9.0.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.11.37"
            },
            {
              "status": "affected",
              "version": "9.16.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.16.50"
            },
            {
              "status": "affected",
              "version": "9.18.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.18.27"
            },
            {
              "status": "affected",
              "version": "9.19.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.19.24"
            },
            {
              "status": "affected",
              "version": "9.9.3-S1",
              "versionType": "custom",
              "lessThanOrEqual": "9.11.37-S1"
            },
            {
              "status": "affected",
              "version": "9.16.8-S1",
              "versionType": "custom",
              "lessThanOrEqual": "9.16.49-S1"
            },
            {
              "status": "affected",
              "version": "9.18.11-S1",
              "versionType": "custom",
              "lessThanOrEqual": "9.18.27-S1"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:isc:bind:9.16.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:isc:bind:9.16.8:s1:*:*:*:*:*:*",
            "cpe:2.3:a:isc:bind:9.18.0:*:*:*:-:*:*:*",
            "cpe:2.3:a:isc:bind:9.18.11:s1:*:*:supported_preview:*:*:*",
            "cpe:2.3:a:isc:bind:9.19.0:*:*:*:-:*:*:*",
            "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:*:*:*"
          ],
          "vendor": "isc",
          "product": "bind",
          "versions": [
            {
              "status": "affected",
              "version": "9.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.11.37"
            },
            {
              "status": "affected",
              "version": "9.16.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.16.50"
            },
            {
              "status": "affected",
              "version": "9.16.8",
              "versionType": "custom",
              "lessThanOrEqual": "9.16.49-s1"
            },
            {
              "status": "affected",
              "version": "9.18.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.18.27"
            },
            {
              "status": "affected",
              "version": "9.18.11",
              "versionType": "custom",
              "lessThanOrEqual": "9.18.27-s1"
            },
            {
              "status": "affected",
              "version": "9.19.0",
              "versionType": "custom",
              "lessThanOrEqual": "9.19.24"
            },
            {
              "status": "affected",
              "version": "9.9.3",
              "versionType": "custom",
              "lessThanOrEqual": "9.11.37-s1"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-07-23T15:15:03.943",
  "references": [
    {
      "url": "http://www.openwall.com/lists/oss-security/2024/07/23/1",
      "source": "security-officer@isc.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2024/07/31/2",
      "source": "security-officer@isc.org"
    },
    {
      "url": "https://kb.isc.org/docs/cve-2024-1975",
      "source": "security-officer@isc.org"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2024/07/23/1",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.isc.org/docs/cve-2024-1975",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://security.netapp.com/advisory/ntap-20240731-0002/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "If a server hosts a zone containing a \"KEY\" Resource Record, or a resolver DNSSEC-validates a \"KEY\" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of SIG(0) signed requests.\nThis issue affects BIND 9 versions 9.0.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.49-S1, and 9.18.11-S1 through 9.18.27-S1."
    },
    {
      "lang": "es",
      "value": "Si un servidor aloja una zona que contiene un registro de recursos \"KEY\", o un solucionador DNSSEC valida un registro de recursos \"KEY\" de un dominio firmado por DNSSEC en caché, un cliente puede agotar los recursos de la CPU del solucionador enviando una secuencia de solicitudes firmadas SIG(0). Este problema afecta a las versiones de BIND 9 9.0.0 a 9.11.37, 9.16.0 a 9.16.50, 9.18.0 a 9.18.27, 9.19.0 a 9.19.24, 9.9.3-S1 a 9.11.37-S1, 9.16.8-S1 a 9.16.49-S1 y 9.18.11-S1 a 9.18.27-S1."
    }
  ],
  "lastModified": "2026-06-17T07:05:32.120",
  "sourceIdentifier": "security-officer@isc.org"
}