Red Hat Security AdvisoryRHSA-2024:5894
bind security update
Released 2024-08-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 7.7) bind-32:9.11.4-9.P2.el7_7.7, bind-chroot-32:9.11.4-9.P2.el7_7.7, bind-export-libs-32:9.11.4-9.P2.el7_7.7 +7
- Red Hat Enterprise Linux Server Optional AUS (v. 7.7) bind-devel-32:9.11.4-9.P2.el7_7.7, bind-export-devel-32:9.11.4-9.P2.el7_7.7, bind-lite-devel-32:9.11.4-9.P2.el7_7.7 +3
Fixes 2 records
Priority MEDIUM 43
If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02114 · Published 2024-07-23 · Partial fix CWE-770
Priority MEDIUM 43
Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02114 · Published 2024-07-23 · Partial fix CWE-770
