CVE-2024-0760

EUVD-2024-16548
A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. 
This issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0 through 9.19.24, and 9.18.11-S1 through 9.18.27-S1.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
iscbind
9.18.1 ≤
𝑥
≤ 9.18.27
ADP
iscbind
9.19.0 ≤
𝑥
≤ 9.19.24
ADP
iscbind
9.18.11-s1 ≤
𝑥
≤ 9.18.27-s1
ADP
Debian logo
Debian Releases
Debian Product
Codename
bind9
bookworm
1:9.18.33-1~deb12u2
fixed
bookworm (security)
1:9.18.41-1~deb12u1
fixed
bullseye
1:9.16.50-1~deb11u2
not-affected
bullseye (security)
1:9.16.50-1~deb11u4
fixed
forky
1:9.20.15-2
fixed
sid
1:9.20.15-2
fixed
trixie
1:9.20.15-1~deb13u1
fixed
trixie (security)
1:9.20.15-1~deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
bind9
bionic
not-affected
focal
Fixed 1:9.18.28-0ubuntu0.20.04.1
released
jammy
Fixed 1:9.18.28-0ubuntu0.22.04.1
released
noble
Fixed 1:9.18.28-0ubuntu0.24.04.1
released
oracular
Fixed 1:9.18.28-0ubuntu1
released
plucky
Fixed 1:9.18.28-0ubuntu1
released
questing
Fixed 1:9.18.28-0ubuntu1
released
trusty
not-affected
xenial
not-affected
isc-dhcp
bionic
needs-triage
focal
not-affected
jammy
not-affected
noble
needs-triage
oracular
ignored
plucky
needs-triage
questing
needs-triage
trusty
not-affected
xenial
not-affected
bind9-libs
focal
needs-triage
jammy
needs-triage
noble
dne
oracular
dne
plucky
dne
questing
dne
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2024/07/23/1
http://www.openwall.com/lists/oss-security/2024/07/31/2
https://kb.isc.org/docs/cve-2024-0760
http://www.openwall.com/lists/oss-security/2024/07/23/1
https://kb.isc.org/docs/cve-2024-0760
https://security.netapp.com/advisory/ntap-20240731-0004/