Skip to content
fr Sign in
7.5 High

CVE-2024-0760 A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the…

Description

A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. This issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0 through 9.19.24, and 9.18.11-S1 through 9.18.27-S1.

Affected products and versions

Product Affected versions Fixed in
BIND 9.19 9.19.0 → 9.19.24 No fix stated
BIND 9.18 9.18.1 → 9.18.27 No fix stated
BIND 9 9.19 9.19.0 → 9.19.24 No fix stated
BIND 9 9.18 9.18.1 → 9.18.27 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of BIND

The 11 CVEs of BIND →
CVE-2024-4076 Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result… 7.5 High CVE-2024-1975 If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from… 7.5 High CVE-2024-1737 Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any… 7.5 High CVE-2023-6516 To keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the… 7.5 High
Track this CVE