CVE-2024-11187: Many records in the additional section cause CPU exhaustion
ISC · BIND 9
Vendor fix available · Affected: ISC BIND 9 · Exploitation: likely to be exploited (10% or more)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 96% of scored CVEs
DescriptionCVE.org
It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- ISC · BIND 9from 9.11.0 up to and including 9.11.37; from 9.16.0 up to and including 9.16.50; from 9.18.0 up to and including 9.18.32; from 9.20.0 up to and including 9.20.4; from 9.21.0 up to and including 9.21.3; from 9.11.3-S1 up to and including 9.11.37-S1 and 2 more
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Likely to be exploited (10% or more). EPSS gives it a 10% or higher chance of exploitation in the next 30 days.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- ISC
- Published
- January 2025
CoverageNo articles yet
No CyberSIXT article names CVE-2024-11187 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.