CVE-2024-11187

Many records in the additional section cause CPU exhaustion

State: Published
Severity: 7.5 High
Published: Jan 29, 2025
Updated: Feb 11, 2025
Reserved: Nov 13, 2024

Description

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	isc

Weaknesses

CWE-405 Asymmetric Resource Consumption (Amplification)

Affected Products

Product	Versions
BIND 9ISC	9.11.0 through 9.11.37Affected 9.16.0 through 9.16.50Affected 9.18.0 through 9.18.32Affected 9.20.0 through 9.20.4Affected 9.21.0 through 9.21.3Affected 9.11.3-S1 through 9.11.37-S1Affected 9.16.8-S1 through 9.16.50-S1Affected 9.18.11-S1 through 9.18.32-S1Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.