CVE-2024-1737: ISC BIND

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.4-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.

Affected products

• ISC BIND: from 9.11.0, up to and including 9.11.37; from 9.11.4, up to and including 9.16.50; from 9.16.0, up to and including 9.18.27; from 9.16.8, up to and including 9.19.24; from 9.18.0, up to and including 9.11.37_s1; from 9.18.11, up to and including 9.16.50_s1; …
• ISC BIND 9: from 9.11.0, up to and including 9.11.37; from 9.16.0, up to and including 9.16.50; from 9.18.0, up to and including 9.18.27; from 9.19.0, up to and including 9.19.24; from 9.11.4-S1, up to and including 9.11.37-S1; from 9.16.8-S1, up to and including 9.16.50-S1; …

Published 2024-07-23. Last modified 2026-06-17.