Skip to content
OpenAdvisories
High DLA-4050-1 1 CVE

bind9 - security update

Published Feb 11, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 bind9 1:9.16.50-1~deb11u3

Vulnerabilities 1

  • High 7.5
    CVE-2024-11187 EPSS 16%

    Many records in the additional section cause CPU exhaustion

    It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine