Description
If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance.
This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ISC | BIND 9 | 9.11.3-S1 – ≤ 9.11.37-S1, 9.16.8-S1 – ≤ 9.16.45-S1, 9.18.11-S1 – ≤ 9.18.21-S1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | bind | 9.18.24-r0 | — |
| Alpine v3.23 | bind | 9.18.24-r0 | — |
| Alpine v3.22 | bind | 9.18.24-r0 | — |
| Alpine v3.21 | bind | 9.18.24-r0 | — |
| Alpine v3.20 | bind | 9.18.24-r0 | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | bind | 9.18.24-r0 | — |
| Alpine v3.18 | bind | 9.18.24-r0 | — |
| Alpine v3.17 | bind | 9.18.24-r0 | — |
| Alpine v3.16 | bind | 9.16.48-r0 | — |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | bind | 9.18.25-r0 | — |
Advisories 4
- WID-SEC-2024-0386 Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Oct 25, 2026
- NCSC-2024-0433 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Nov 12, 2024
- ICSA-24-319-08 Siemens SINEC INS CISA ICS & IT advisories · Nov 12, 2024
- SSA-915275 SSA-915275: Multiple Vulnerabilities in SINEC INS Before V1.0 SP2 Update 3 Siemens ProductCERT · Nov 12, 2024