1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2024:2868-1

[SUSE-SU-2024:2868-1] Security update for bind

Severity Important
CVEs 2
Info References Vulnerabilities

Security update for bind

This update for bind fixes the following issues:

Security issues fixed:

  • It is possible to craft excessively large numbers of resource record types for a given owner name, which has the effect of slowing down database processing. This has been addressed by only allowing a maximum of 100 records to be stored per name and type in a cache or zone database. (CVE-2024-1737, bsc#1228256)
  • Validating DNS messages signed using the SIG(0) protocol (RFC 2931) could cause excessive CPU load, leading to a denial-of-service condition. Support for SIG(0) message validation was removed from this version of named. (CVE-2024-1975, bsc#1228257)
ID
SUSE-SU-2024:2868-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2024/suse-su-20242868-1/
Published
2024-08-09T13:32:01
(5 weeks ago)
Modified
2024-08-09T13:32:01
(5 weeks ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date