CVE-2024-0760

Name of the Vulnerable Software and Affected Versions: BIND 9 versions 9.18.1 through 9.18.27 BIND 9 versions 9.19.0 through 9.19.24 BIND 9 versions 9.18.11-S1 through 9.18.27-S1

Description: A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack.

Recommendations: For BIND 9 versions 9.18.1 through 9.18.27, update to a version outside of this range to resolve the issue. For BIND 9 versions 9.19.0 through 9.19.24, update to a version outside of this range to resolve the issue. For BIND 9 versions 9.18.11-S1 through 9.18.27-S1, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting the use of TCP for DNS messages to minimize the risk of exploitation.