Skip to content
OpenAdvisories
High ELSA-2025-1670 2 CVEs

Important: bind9.18 security update (Oracle Linux 9)

Published Feb 21, 2025 · Updated Feb 21, 2025

Ecosystem: Oracle Linux

Summary

[32:9.18.29-1.el9_5.1]
- Fix CVE-2024-11187 bind: bind9: Many records in the additional section cause CPU exhaustion
- Fix CVE-2024-12705 bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 9 bind9.18 32:9.18.29-1.el9_5.1
Oracle Linux · 9 bind9.18-chroot 32:9.18.29-1.el9_5.1
Oracle Linux · 9 bind9.18-devel 32:9.18.29-1.el9_5.1
Oracle Linux · 9 bind9.18-dnssec-utils 32:9.18.29-1.el9_5.1
Oracle Linux · 9 bind9.18-doc 32:9.18.29-1.el9_5.1
Oracle Linux · 9 bind9.18-libs 32:9.18.29-1.el9_5.1
Oracle Linux · 9 bind9.18-utils 32:9.18.29-1.el9_5.1

Vulnerabilities 2

  • High 7.5
    CVE-2024-11187 EPSS 16%

    Many records in the additional section cause CPU exhaustion

    It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2024-12705 EPSS 19%

    DNS-over-HTTPS implementation suffers from multiple issues under heavy query load

    Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine