Red Hat Security Advisory

RHSA-2025:1670

bind9.18 security update

Released 2025-02-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) bind9.18-devel-32:9.18.29-1.el9_5.1, bind9.18-doc-32:9.18.29-1.el9_5.1, bind9.18-libs-32:9.18.29-1.el9_5.1
Red Hat Enterprise Linux AppStream (v. 9) bind9.18-32:9.18.29-1.el9_5.1, bind9.18-chroot-32:9.18.29-1.el9_5.1, bind9.18-dnssec-utils-32:9.18.29-1.el9_5.1 +2

TI-2024-11779 CVE-2024-12705 · GHSA-gf34-2fpp-vmc4

MEDIUM 57

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.18566 Published 2025-01-29 Fixed CWE-770

TI-2024-10362 CVE-2024-11187 · GHSA-w8w2-83mf-6cp5

MEDIUM 55

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.16015 Published 2025-01-29 Partial fix CWE-405