CVE-2024-0760
Published: 23 July 2024
A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. This issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0 through 9.19.24, and 9.18.11-S1 through 9.18.27-S1.
Notes
Author | Note |
---|---|
alexmurray |
As of isc-dhcp-4.4.3-1, isc-dhcp vendors bind9 libs |
mdeslaur |
in focal and jammy, isc-dhcp uses the bind9-libs package This is unlikely to affect isc-dhcp's use of bind9-libs and the vendored bind9 libs, marking as negligible This issue doesn't appear to affect version older than 9.18 |
Priority
Status
Package | Release | Status |
---|---|---|
bind9
Launchpad, Ubuntu, Debian |
bionic |
Not vulnerable
(code not present)
|
focal |
Released
(1:9.18.28-0ubuntu0.20.04.1)
|
|
jammy |
Released
(1:9.18.28-0ubuntu0.22.04.1)
|
|
noble |
Released
(1:9.18.28-0ubuntu0.24.04.1)
|
|
trusty |
Not vulnerable
(code not present)
|
|
upstream |
Released
(9.18.28)
|
|
xenial |
Not vulnerable
(code not present)
|
|
bind9-libs
Launchpad, Ubuntu, Debian |
focal |
Needs triage
|
jammy |
Needs triage
|
|
noble |
Does not exist
|
|
upstream |
Needs triage
|
|
isc-dhcp
Launchpad, Ubuntu, Debian |
bionic |
Needs triage
|
focal |
Not vulnerable
(code not present)
|
|
jammy |
Not vulnerable
(code not present)
|
|
noble |
Needs triage
|
|
trusty |
Not vulnerable
(code not present)
|
|
upstream |
Needs triage
|
|
xenial |
Not vulnerable
(code not present)
|
Severity score breakdown
Parameter | Value |
---|---|
Base score | 7.5 |
Attack vector | Network |
Attack complexity | Low |
Privileges required | None |
User interaction | None |
Scope | Unchanged |
Confidentiality | None |
Integrity impact | None |
Availability impact | High |
Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |