Wind River Support Network

HomeDefectsLIN1024-3065
Fixed

LIN1024-3065 : Security Advisory - bind - CVE-2024-0760

Created: Jul 23, 2024    Updated: Aug 28, 2024
Resolved Date: Aug 18, 2024
Found In Version: 10.24.33.1
Fix Version: 10.24.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Userspace

Description

A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. 
This issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0 through 9.19.24, and 9.18.11-S1 through 9.18.27-S1.

CREATE(Triage):(User=admin) CVE-2024-0760 (https://nvd.nist.gov/vuln/detail/CVE-2024-0760)

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube