Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.
The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Red Hat Enterprise Linux 8 | RedHat | bind9.16-32:9.16.23-0.22.el8_10 | * |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | RedHat | bind9.16-32:9.16.23-0.7.el8_6.6 | * |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | RedHat | bind9.16-32:9.16.23-0.7.el8_6.6 | * |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | RedHat | bind9.16-32:9.16.23-0.7.el8_6.6 | * |
| Red Hat Enterprise Linux 8.8 Extended Update Support | RedHat | bind9.16-32:9.16.23-0.14.el8_8.5 | * |
| Red Hat Enterprise Linux 9 | RedHat | bind-32:9.16.23-18.el9_4.6 | * |
| Red Hat Enterprise Linux 9 | RedHat | bind-dyndb-ldap-0:11.9-10.el9_4 | * |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | RedHat | bind-32:9.16.23-1.el9_0.7 | * |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | RedHat | bind-dyndb-ldap-0:11.9-7.el9_0.3 | * |
| Red Hat Enterprise Linux 9.2 Extended Update Support | RedHat | bind-32:9.16.23-11.el9_2.5 | * |
| Red Hat Enterprise Linux 9.2 Extended Update Support | RedHat | bind-dyndb-ldap-0:11.9-8.el9_2.3 | * |
| Red Hat OpenShift Container Platform 4.13 | RedHat | rhcos-413.92.202408270922-0 | * |
| Red Hat OpenShift Container Platform 4.14 | RedHat | rhcos-414.92.202409041930-0 | * |
| Red Hat OpenShift Container Platform 4.15 | RedHat | rhcos-415.92.202408271217-0 | * |
| Red Hat OpenShift Container Platform 4.16 | RedHat | rhcos-416.94.202408260940-0 | * |
| Bind9 | Ubuntu | devel | * |
| Bind9 | Ubuntu | focal | * |
| Bind9 | Ubuntu | jammy | * |
| Bind9 | Ubuntu | noble | * |
| Bind9 | Ubuntu | oracular | * |
| Bind9 | Ubuntu | upstream | * |
While assertion is good for catching logic errors and reducing the chances of reaching more serious vulnerability conditions, it can still lead to a denial of service. For example, if a server handles multiple simultaneous connections, and an assert() occurs in one single connection that causes all other connections to be dropped, this is a reachable assertion that leads to a denial of service.