CVE-2024-12705 — DNS-over-HTTPS implementation suffers from multiple issues under heavy query load

Affected: ISC BIND 9

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.

USN-7241-1 — bind9 vulnerabilities

Affected: Ubuntu:20.04:LTS: bind9, Ubuntu:22.04:LTS: bind9, Ubuntu:24.04:LTS: bind9

Toshifumi Sakaguchi discovered that Bind incorrectly handled many records in the additional section. A remote attacker could possibly use this issue to cause Bind to consume CPU resources, leading to a denial of service. (CVE-2024-11187)

Jean-François Billaud discovered that the Bind DNS-over-HTTPS implementation incorrectly handled a heavy query load. A remote attacker could possibly use this issue to cause Bind to consume resources, leading to a denial of service. (CVE-2024-12705)

Most recent entries from all

CVE-2024-12705 — DNS-over-HTTPS implementation suffers from multiple issues under heavy query load

USN-7241-1 — bind9 vulnerabilities