1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2024:2810-1

[SUSE-SU-2024:2810-1] Security update for bind

Severity Important
CVEs 2
Info References Vulnerabilities

Security update for bind

This update for bind fixes the following issues:

  • CVE-2024-1737: It is possible to craft excessively large numbers of resource record types for a given owner name, which has the effect of slowing down database processing. This has been addressed by adding a configurable limit to the number of records that can be stored per name and type in a cache or zone database. The default is 100, which can be tuned with the new max-types-per-name option. (bsc#1228256)
  • CVE-2024-1975: Validating DNS messages signed using the SIG(0) protocol (RFC 2931) could cause excessive CPU load, leading to a denial-of-service condition. Support for SIG(0) message validation was removed from this version of named. (bsc#1228257)
ID
SUSE-SU-2024:2810-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2024/suse-su-20242810-1/
Published
2024-08-07T07:50:37
(5 weeks ago)
Modified
2024-08-07T07:50:37
(5 weeks ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date