CVE-2024-11187
High · 7.5CVSS
7.5
EPSS
15.8%
Published
Jan 29, 2025
CISA due date
—
The record
It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | bind | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind-chroot | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind-devel | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind-export-devel | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind-export-libs | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind-libs | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind-libs-lite | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind-license | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind-lite-devel | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind-pkcs11 | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind-pkcs11-devel | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind-pkcs11-libs | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind-pkcs11-utils | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind-sdb | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind-sdb-chroot | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind-utils | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | bind9.16 | 0 | 32:9.16.23-0.22.el8_10.2 |
| AlmaLinux:8 | bind9.16-chroot | 0 | 32:9.16.23-0.22.el8_10.2 |
| AlmaLinux:8 | bind9.16-devel | 0 | 32:9.16.23-0.22.el8_10.2 |
| AlmaLinux:8 | bind9.16-dnssec-utils | 0 | 32:9.16.23-0.22.el8_10.2 |
| AlmaLinux:8 | bind9.16-doc | 0 | 32:9.16.23-0.22.el8_10.2 |
| AlmaLinux:8 | bind9.16-libs | 0 | 32:9.16.23-0.22.el8_10.2 |
| AlmaLinux:8 | bind9.16-license | 0 | 32:9.16.23-0.22.el8_10.2 |
| AlmaLinux:8 | bind9.16-utils | 0 | 32:9.16.23-0.22.el8_10.2 |
| AlmaLinux:8 | python3-bind | 0 | 32:9.11.36-16.el8_10.4 |
| AlmaLinux:8 | python3-bind9.16 | 0 | 32:9.16.23-0.22.el8_10.2 |
| AlmaLinux:9 | bind | 0 | 32:9.16.23-24.el9_5.3 |
| AlmaLinux:9 | bind-chroot | 0 | 32:9.16.23-24.el9_5.3 |
| AlmaLinux:9 | bind-devel | 0 | 32:9.16.23-24.el9_5.3 |
| AlmaLinux:9 | bind-dnssec-doc | 0 | 32:9.16.23-24.el9_5.3 |
| AlmaLinux:9 | bind-dnssec-utils | 0 | 32:9.16.23-24.el9_5.3 |
| AlmaLinux:9 | bind-doc | 0 | 32:9.16.23-24.el9_5.3 |
| AlmaLinux:9 | bind-libs | 0 | 32:9.16.23-24.el9_5.3 |
| AlmaLinux:9 | bind-license | 0 | 32:9.16.23-24.el9_5.3 |
| AlmaLinux:9 | bind-utils | 0 | 32:9.16.23-24.el9_5.3 |
| AlmaLinux:9 | bind9.18 | 0 | 32:9.18.29-1.el9_5.1 |
| AlmaLinux:9 | bind9.18-chroot | 0 | 32:9.18.29-1.el9_5.1 |
| AlmaLinux:9 | bind9.18-devel | 0 | 32:9.18.29-1.el9_5.1 |
| AlmaLinux:9 | bind9.18-dnssec-utils | 0 | 32:9.18.29-1.el9_5.1 |
| AlmaLinux:9 | bind9.18-doc | 0 | 32:9.18.29-1.el9_5.1 |
| AlmaLinux:9 | bind9.18-libs | 0 | 32:9.18.29-1.el9_5.1 |
| AlmaLinux:9 | bind9.18-utils | 0 | 32:9.18.29-1.el9_5.1 |
| AlmaLinux:9 | python3-bind | 0 | 32:9.16.23-24.el9_5.3 |
| Alpine:v3.18 | bind | 0 | 9.18.33-r0 |
| Alpine:v3.19 | bind | 0 | 9.18.33-r0 |
| Alpine:v3.20 | bind | 0 | 9.18.33-r0 |
| Alpine:v3.21 | bind | 0 | 9.18.33-r0 |
| Alpine:v3.22 | bind | 0 | 9.18.33-r0 |
| Chainguard | bind | 0 | 0 |
| Chainguard | bind-dev | 0 | 0 |
| Chainguard | bind-dnssec-root | 0 | 0 |
| Chainguard | bind-dnssec-tools | 0 | 0 |
| Chainguard | bind-doc | 0 | 0 |
| Chainguard | bind-libs | 0 | 0 |
| Chainguard | bind-plugins | 0 | 0 |
| Chainguard | bind-tools | 0 | 0 |
| Debian:11 | bind9 | 0 | No fix |
| Debian:11 | bind9 | 0 | 1:9.16.50-1~deb11u3 |
| Debian:12 | bind9 | 0 | 1:9.18.33-1~deb12u2 |
| Debian:13 | bind9 | 0 | No fix |
| Mageia:9 | bind | 0 | 9.18.33-1.mga9 |
| Rocky Linux:8 | bind | 0 | 2:9.11.36-16.el8_10.4 |
| Rocky Linux:8 | bind9.16 | 0 | 2:9.16.23-0.22.el8_10.2 |
| Rocky Linux:9 | bind | 0 | 2:9.16.23-24.el9_5.3 |
| Rocky Linux:9 | bind9.18 | 0 | 2:9.18.29-1.el9_5.1 |
| SUSE:Enterprise Storage 7.1 | bind | 0 | 9.16.6-150300.22.50.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | bind | 0 | 9.16.6-150300.22.50.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | bind | 0 | 9.16.50-150400.5.46.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | bind | 0 | 9.16.50-150400.5.46.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | bind | 0 | 9.16.50-150500.8.24.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | bind | 0 | 9.16.50-150500.8.24.1 |
| SUSE:Linux Enterprise Micro 5.5 | bind | 0 | 9.16.50-150500.8.24.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | bind | 0 | 9.18.33-150600.3.6.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | bind | 0 | 9.16.6-150300.22.50.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | bind | 0 | 9.20.9-150700.3.3.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP6 | bind | 0 | 9.18.33-150600.3.6.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP7 | bind | 0 | 9.20.9-150700.3.3.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | bind | 0 | 9.11.22-3.60.2 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | bind | 0 | 9.16.6-150300.22.50.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | bind | 0 | 9.16.50-150400.5.46.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | bind | 0 | 9.16.50-150500.8.24.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | bind | 0 | 9.11.22-3.60.2 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | bind | 0 | 9.16.6-150300.22.50.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | bind | 0 | 9.16.50-150400.5.46.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | bind | 0 | 9.16.50-150500.8.24.1 |
| SUSE:Manager Client Tools for SLE Micro 5 | bind | 0 | 9.16.6-150000.12.80.1 |
| SUSE:Manager Proxy 4.3 | bind | 0 | 9.16.50-150400.5.46.1 |
| SUSE:Manager Server 4.3 | bind | 0 | 9.16.50-150400.5.46.1 |
| Wolfi | bind | 0 | 0 |
| Wolfi | bind-dev | 0 | 0 |
| Wolfi | bind-dnssec-root | 0 | 0 |
| Wolfi | bind-dnssec-tools | 0 | 0 |
| Wolfi | bind-doc | 0 | 0 |
| Wolfi | bind-libs | 0 | 0 |
| Wolfi | bind-plugins | 0 | 0 |
| Wolfi | bind-tools | 0 | 0 |
| openSUSE:Leap 15.6 | bind | 0 | 9.18.33-150600.3.6.1 |
| openSUSE:Tumbleweed | bind | 0 | 9.20.5-1.1 |
Related vulnerabilities
- CVE-2024-1737 Resolver caches and authoritative zone databases that hold significant numbers of RRs for… Also affects bind
- CVE-2024-1975 If a server hosts a zone containing a "KEY" Resource Record, or a resolver… Also affects bind
- CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… Also affects bind
- CVE-2022-2795 By flooding the target resolver with queries exploiting this flaw an attacker can… Also affects bind
- CVE-2022-38178 By spoofing the target resolver with responses that have a malformed EdDSA signature, an… Also affects bind
- CVE-2022-38177 By spoofing the target resolver with responses that have a malformed ECDSA signature, an… Also affects bind
- CVE-2024-4076 Client queries that trigger serving stale data and that also require lookups in local… Also affects bind9.16
- CVE-2024-12705 Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by… Also affects bind9.18