CISA Warns of Exploitable Vulnerabilities in Popular BIND 9 DNS Software
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-50387 | Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU… | 7.5 | 100% | ||
| CVE-2024-0760 | A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress | 7.5 | 5% | ||
| CVE-2024-1737 | Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance… | 7.5 | 2% | ||
| CVE-2024-1975 | If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a… | 7.5 | 2% | ||
| CVE-2024-4076 | Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure | 7.5 | 2% |
From the original article
1 min read at thehackernews.com
Ravie Lakshmanan Jul 25, 2024 DNS Security /Vulnerability The Internet Systems Consortium (ISC) has released patches to address multiple security vulnerabilities in the Berkeley Internet Name Domain ( BIND ) 9 Domain Name System (DNS) software suite that could be exploited to trigger a denial-of-service (DoS) condition.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.