CVE-2024-0760

🗓️ 23 Jul 2024 14:26:54Reported by Debian Security Bug TrackerType

A DNS server vulnerability allows a malicious client to overwhelm the server with TCP messages, potentially causing instability. ACLs are ineffective

Reporter	Title	Published	Views	Family All 79
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to a denial of service due to ISC BIND	20 Nov 202416:56	–	ibm
IBM Security Bulletins	Security Bulletin: ISC BIND on IBM i is vulnerable to a remote attacker causing a denial of service due to multiple vulnerabilities.	13 Sep 202416:07	–	ibm
IBM Security Bulletins	Security Bulletin: multiple vulerability in IBM Spectrum Symphony with ISC BIND	23 Oct 202520:11	–	ibm
AlpineLinux	CVE-2024-0760	23 Jul 202414:26	–	alpinelinux
AstraLinux	Astra Linux – Vulnerability in bind9	11 Feb 202507:35	–	astralinux
Tenable Nessus	Azure Linux 3.0 Security Update: bind (CVE-2024-0760)	22 Jan 202600:00	–	nessus
Tenable Nessus	Debian dsa-5734 : bind9 - security update	25 Jul 202400:00	–	nessus
Tenable Nessus	Fedora 41 : bind / bind-dyndb-ldap (2024-56ae6c2c7a)	14 Nov 202400:00	–	nessus
Tenable Nessus	Fedora 40 : bind / bind-dyndb-ldap (2024-8af1780fdf)	3 Aug 202400:00	–	nessus
Tenable Nessus	Fedora 39 : bind / bind-dyndb-ldap (2024-ef8a7031e7)	17 Aug 202400:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	12	all	bind9	1:9.18.28-1~deb12u1	bind9_1:9.18.28-1~deb12u1_all.deb
Debian	13	all	bind9	1:9.20.0-1	bind9_1:9.20.0-1_all.deb
Debian	14	all	bind9	1:9.20.0-1	bind9_1:9.20.0-1_all.deb
Debian	999	all	bind9	1:9.20.0-1	bind9_1:9.20.0-1_all.deb

23 Jul 2024 14:26Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.5

EPSS0.0468

SSVC