CVE-2024-0760
Fixed in a distro release EPSS 5%CVSS 7.5
A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. This issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0 through 9.19.24, and 9.18.11-S1 through 9.18.27-S1.
Products: ISC BIND 9, ISC BIND
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.17 | bind | 9.18.31-r0 |
| Alpine 3.18 | bind | 9.18.31-r0 |
| Alpine 3.19 | bind | 9.18.31-r0 |
| Alpine 3.20 | bind | 9.18.31-r0 |
| Alpine 3.21 | bind | 9.18.28-r0 |
| Alpine 3.22 | bind | 9.18.28-r0 |
| Alpine 3.23 | bind | 9.18.28-r0 |
| Alpine 3.24 | bind | 9.18.28-r0 |
| Chainguard | bind | 9.18.28-r0 |
| Debian 12 | bind9 | 1:9.18.28-1~deb12u1 |
| Debian 13 | bind9 | 1:9.20.0-1 |
| Debian 14 | bind9 | 1:9.20.0-1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP6 | bind | 9.18.28-150600.3.3.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP6 | bind | 9.18.28-150600.3.3.1 |
| Ubuntu 18.04 LTS | isc-dhcp | no fix |
| Ubuntu 20.04 LTS | bind9 | 1:9.18.28-0ubuntu0.20.04.1 |
| Ubuntu 20.04 LTS | bind9-libs | no fix |
| Ubuntu 22.04 LTS | bind9 | 1:9.18.28-0ubuntu0.22.04.1 |
| Ubuntu 22.04 LTS | bind9-libs | no fix |
| Ubuntu 24.04 LTS | bind9 | 1:9.18.28-0ubuntu0.24.04.1 |
| Ubuntu 24.04 LTS | isc-dhcp | no fix |
| Ubuntu 25.10 | isc-dhcp | no fix |
| Ubuntu 26.04 LTS | isc-dhcp | no fix |
| Wolfi | bind | 9.18.28-r0 |
| openSUSE Leap 15.6 | bind | 9.18.28-150600.3.3.1 |
| openSUSE Tumbleweed | bind | 9.20.0-1.1 |