VDB
ALPINE-CVE-2024-1737
ALPINE-CVE-2024-1737
PUBLISHED
CVSS 7.5 HIGH
Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.4-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alpine:v3.21 | bind | 9.14.4-r4, 9.10.0_p1-r0, 9.10.0_p2-r0 |
| Alpine:v3.19 | bind | 9.8.1-r0, 0, 0 |
| Alpine:v3.18 | bind | 9.9.3_p2-r2, 0, 9.10.0-r0 |
| Alpine:v3.24 | bind | 0, 0 |
| Alpine:v3.20 | bind | 9.6.0, 9.18.9-r0, 9.18.8-r0 |
| Alpine:v3.17 | bind | 9.11.2-r1, 9.11.2_p1-r0, 9.12.0-r0 |
| Alpine:v3.22 | bind | 9.14.4-r2, 9.9.4_p2-r0, 9.9.5-r0 |
| Alpine:v3.23 | bind | 9.9.3_p2-r1, 9.9.3_p2-r0, 9.9.3_p1-r0 |
Timeline
- Jul 23, 2024 CVE Published
- Jun 15, 2026 CVE Updated
- Aug 8, 2026 Distribution Patch