Vulnerabilityhigh
BIND updates fix high-severity DoS bugs in the DNS software suite
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-0760 | A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress | 7.5 | 5% | ||
| CVE-2024-1737 | Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance… | 7.5 | 2% | ||
| CVE-2024-1975 | If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a… | 7.5 | 2% | ||
| CVE-2024-4076 | Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure | 7.5 | 2% |
From the original article
2 min read at securityaffairs.com
The Internet Systems Consortium (ISC) released BIND security updates that fixed several remotely exploitable DoS bugs in the DNS software suite. The Internet Systems Consortium (ISC) released security updates for BIND that address DoS vulnerabilities that could be remotely exploited. An attacker can exploit these vulnerabilities to disrupt DNS services.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.