Wind River Support Network

HomeDefectsLIN1022-10024
Fixed

LIN1022-10024 : Security Advisory - bind - CVE-2024-0760

Created: Jul 23, 2024    Updated: Sep 29, 2024
Resolved Date: Sep 25, 2024
Found In Version: 10.22.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace

Description

A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. 
This issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0 through 9.19.24, and 9.18.11-S1 through 9.18.27-S1.

CREATE(Triage):(User=admin) CVE-2024-0760 (https://nvd.nist.gov/vuln/detail/CVE-2024-0760)

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube