CVE-2024-11187

CWE-405CWE-400 — Uncontrolled Resource Consumption9 documents7 sources
Severity
7.5HIGH
EPSS
4.1%
top 11.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
ISC Bind 9
Timeline
PublishedJan 29
Latest updateJan 30

Description

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶Alpinebind< 9.18.33-r0+5
▶Debianbind9< 1:9.16.50-1~deb11u3+3
▶Ubuntubind9< 1:9.18.30-0ubuntu0.20.04.2+2
▶CVEListV5isc/bind_99.11.0 — 9.11.37+7

🔴Vulnerability Details

5
GHSA
GHSA-w8w2-83mf-6cp5: It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section↗2025-01-30
▶
OSV
CVE-2024-11187: It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section↗2025-01-29
▶
CVEList
Many records in the additional section cause CPU exhaustion↗2025-01-29
▶
OSV
CVE-2024-11187: It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section↗2025-01-29
▶
OSV
bind9 vulnerabilities↗2025-01-29
▶

📋Vendor Advisories

3
Ubuntu
Bind vulnerabilities↗2025-01-29
▶
Red Hat
bind: bind9: Many records in the additional section cause CPU exhaustion↗2025-01-29
▶
Debian
CVE-2024-11187: bind9 - It is possible to construct a zone such that some queries to it will generate re...↗2024
▶