vulnerability
Red Hat OpenShift: CVE-2024-1737: bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:N/I:N/A:C) | Jul 23, 2024 | Sep 5, 2024 | Jan 28, 2025 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Jul 23, 2024
Added
Sep 5, 2024
Modified
Jan 28, 2025
Description
Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name.
This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.4-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1.
Solution
linuxrpm-upgrade-rhcos
References
- CVE-2024-1737
- https://attackerkb.com/topics/CVE-2024-1737
- REDHAT-RHSA-2024:5231
- REDHAT-RHSA-2024:5390
- REDHAT-RHSA-2024:5418
- REDHAT-RHSA-2024:5524
- REDHAT-RHSA-2024:5525
- REDHAT-RHSA-2024:5655
- REDHAT-RHSA-2024:5813
- REDHAT-RHSA-2024:5838
- REDHAT-RHSA-2024:5871
- REDHAT-RHSA-2024:5894
- REDHAT-RHSA-2024:5907
- REDHAT-RHSA-2024:5908
- REDHAT-RHSA-2024:5930
- REDHAT-RHSA-2024:6004
- REDHAT-RHSA-2024:6009
- REDHAT-RHSA-2024:6013
- REDHAT-RHSA-2024:6406
- REDHAT-RHSA-2024:6642
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.