CVE-2024-0760 A flood of DNS messages over TCP may make the server unstable

🗓️ 23 Jul 2024 14:26:54Reported by iscType

A flood of DNS messages over TCP can cause server instabilit

Reporter	Title	Published	Views	Family All 79
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to a denial of service due to ISC BIND	20 Nov 202416:56	–	ibm
IBM Security Bulletins	Security Bulletin: ISC BIND on IBM i is vulnerable to a remote attacker causing a denial of service due to multiple vulnerabilities.	13 Sep 202416:07	–	ibm
IBM Security Bulletins	Security Bulletin: multiple vulerability in IBM Spectrum Symphony with ISC BIND	23 Oct 202520:11	–	ibm
AlpineLinux	CVE-2024-0760	23 Jul 202414:26	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в bind9	11 Feb 202507:35	–	astralinux
Tenable Nessus	Azure Linux 3.0 Security Update: bind (CVE-2024-0760)	22 Jan 202600:00	–	nessus
Tenable Nessus	Debian dsa-5734 : bind9 - security update	25 Jul 202400:00	–	nessus
Tenable Nessus	Fedora 41 : bind / bind-dyndb-ldap (2024-56ae6c2c7a)	14 Nov 202400:00	–	nessus
Tenable Nessus	Fedora 40 : bind / bind-dyndb-ldap (2024-8af1780fdf)	3 Aug 202400:00	–	nessus
Tenable Nessus	Fedora 39 : bind / bind-dyndb-ldap (2024-ef8a7031e7)	17 Aug 202400:00	–	nessus

[
  {
    "vendor": "ISC",
    "product": "BIND 9",
    "versions": [
      {
        "version": "9.18.1",
        "lessThanOrEqual": "9.18.27",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "9.19.0",
        "lessThanOrEqual": "9.19.24",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "9.18.11-S1",
        "lessThanOrEqual": "9.18.27-S1",
        "status": "affected",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2024/07/31/2
openwall	www.openwall.com/lists/oss-security/2024/07/23/1
kb	www.kb.isc.org/docs/cve-2024-0760

31 Jul 2024 11:05Current

CVSS 3.17.5

EPSS0.0468