p PatchFirst

ALPINE-CVE-2024-0760

ALPINE-CVE-2024-0760

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. This issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0 through 9.19.24, and 9.18.11-S1 through 9.18.27-S1.

CVSS 7.5 · High · Fix available

Published
Updated

Stack: system

Affected products and versions

  • bind Alpine:v3.17

    Affected ranges
    • ECOSYSTEM: < 9.18.31-r0

    Update to 9.18.31-r0

  • bind Alpine:v3.18

    Affected ranges
    • ECOSYSTEM: < 9.18.31-r0

    Update to 9.18.31-r0

  • bind Alpine:v3.19

    Affected ranges
    • ECOSYSTEM: < 9.18.31-r0

    Update to 9.18.31-r0

  • bind Alpine:v3.20

    Affected ranges
    • ECOSYSTEM: < 9.18.31-r0

    Update to 9.18.31-r0

  • bind Alpine:v3.21

    Affected ranges
    • ECOSYSTEM: < 9.18.28-r0

    Update to 9.18.28-r0

  • bind Alpine:v3.22

    Affected ranges
    • ECOSYSTEM: < 9.18.28-r0

    Update to 9.18.28-r0

  • bind Alpine:v3.23

    Affected ranges
    • ECOSYSTEM: < 9.18.28-r0

    Update to 9.18.28-r0

  • bind Alpine:v3.24

    Affected ranges
    • ECOSYSTEM: < 9.18.28-r0

    Update to 9.18.28-r0

Original sources

Check your server →