Red Hat Security Advisory

RHSA-2025:1664

bind security update

Released 2025-02-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.0) bind-32:9.16.23-1.el9_0.10, bind-chroot-32:9.16.23-1.el9_0.10, bind-dnssec-doc-32:9.16.23-1.el9_0.10 +5

TI-2024-10362 CVE-2024-11187 · GHSA-w8w2-83mf-6cp5

MEDIUM 55

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.16015 Published 2025-01-29 Partial fix CWE-405