Skip to content
OpenAdvisories
High RHSA-2025:1670 2 CVEs

Red Hat Security Advisory: bind9.18 security update

Published Feb 20, 2025 · Updated Oct 14, 2026

Ecosystem: Red Hat

Fixed packages 18

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream bind9.18 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::appstream bind9.18-chroot 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::appstream bind9.18-debuginfo 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::appstream bind9.18-debugsource 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::appstream bind9.18-dnssec-utils 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::appstream bind9.18-dnssec-utils-debuginfo 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::appstream bind9.18-libs 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::appstream bind9.18-libs-debuginfo 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::appstream bind9.18-utils 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::appstream bind9.18-utils-debuginfo 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::crb bind9.18-debuginfo 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::crb bind9.18-debugsource 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::crb bind9.18-devel 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::crb bind9.18-dnssec-utils-debuginfo 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::crb bind9.18-doc 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::crb bind9.18-libs 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::crb bind9.18-libs-debuginfo 32:9.18.29-1.el9_5.1
Red Hat · RHEL 9 enterprise_linux:9::crb bind9.18-utils-debuginfo 32:9.18.29-1.el9_5.1

Vulnerabilities 2

  • High 7.5
    CVE-2024-11187 EPSS 16%

    Many records in the additional section cause CPU exhaustion

    It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2024-12705 EPSS 19%

    DNS-over-HTTPS implementation suffers from multiple issues under heavy query load

    Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2342879
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2342880
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1670.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-11187
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-11187
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-11187
  • article
    https://kb.isc.org/docs/cve-2024-11187
  • report
    https://access.redhat.com/security/cve/CVE-2024-12705
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-12705
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-12705
  • article
    https://kb.isc.org/docs/cve-2024-12705