Red Hat Security Advisory: bind security update

Fixed packages 38

Vulnerabilities 2

• High 7.5
  CVE-2024-1737

  BIND's database will be slow if a very large number of RRs exist at the same name

  Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This iss…

  ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  Jul 23, 2024
• High 7.5
  CVE-2024-1975

  SIG(0) can be used to exhaust CPU resources

  If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of SIG(0) signed requests. This issue aff…

  ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  Jul 23, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2298893
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2298901
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5838.json
• report
  https://access.redhat.com/security/cve/CVE-2024-1737
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-1737
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-1737
• report
  https://access.redhat.com/security/cve/CVE-2024-1975
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-1975
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-1975