Wind River Support Network

HomeDefectsLIN1023-7339
Fixed

LIN1023-7339 : Security Advisory - bind - CVE-2024-0760

Created: Jul 23, 2024    Updated: Sep 18, 2024
Resolved Date: Sep 16, 2024
Found In Version: 10.23.30.1
Fix Version: 10.23.30.13
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Userspace

Description

A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. 
This issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0 through 9.19.24, and 9.18.11-S1 through 9.18.27-S1.

CREATE(Triage):(User=admin) CVE-2024-0760 (https://nvd.nist.gov/vuln/detail/CVE-2024-0760)

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube