Skip to content
OpenAdvisories
High ELSA-2025-1718 1 CVE

Important: bind security update (Oracle Linux 7)

Published Mar 10, 2025 · Updated Mar 10, 2025

Ecosystem: Oracle Linux

Summary

[32:9.11.4-26.0.3.P2.16]
- Resolve CVE-2024-11187 [Orabug: 37616907]

Fixed packages 16

ReleasePackageFixed in
Oracle Linux · 7 bind 32:9.11.4-26.0.3.P2.el7_9.16
Oracle Linux · 7 bind-chroot 32:9.11.4-26.0.3.P2.el7_9.16
Oracle Linux · 7 bind-devel 32:9.11.4-26.0.3.P2.el7_9.16
Oracle Linux · 7 bind-export-devel 32:9.11.4-26.0.3.P2.el7_9.16
Oracle Linux · 7 bind-export-libs 32:9.11.4-26.0.3.P2.el7_9.16
Oracle Linux · 7 bind-libs 32:9.11.4-26.0.3.P2.el7_9.16
Oracle Linux · 7 bind-libs-lite 32:9.11.4-26.0.3.P2.el7_9.16
Oracle Linux · 7 bind-license 32:9.11.4-26.0.3.P2.el7_9.16
Oracle Linux · 7 bind-lite-devel 32:9.11.4-26.0.3.P2.el7_9.16
Oracle Linux · 7 bind-pkcs11 32:9.11.4-26.0.3.P2.el7_9.16
Oracle Linux · 7 bind-pkcs11-devel 32:9.11.4-26.0.3.P2.el7_9.16
Oracle Linux · 7 bind-pkcs11-libs 32:9.11.4-26.0.3.P2.el7_9.16
Oracle Linux · 7 bind-pkcs11-utils 32:9.11.4-26.0.3.P2.el7_9.16
Oracle Linux · 7 bind-sdb 32:9.11.4-26.0.3.P2.el7_9.16
Oracle Linux · 7 bind-sdb-chroot 32:9.11.4-26.0.3.P2.el7_9.16
Oracle Linux · 7 bind-utils 32:9.11.4-26.0.3.P2.el7_9.16

Vulnerabilities 1

  • High 7.5
    CVE-2024-11187 EPSS 16%

    Many records in the additional section cause CPU exhaustion

    It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine