CVE-2024-0760

A flood of DNS messages over TCP may make the server unstable

High · published July 23, 2024

CVSS v3.1
7.5
EPSS
5%
Percentile
91.7
In the wild
Unconfirmed
What it is

A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack.

This issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0 through 9.19.24, and 9.18.11-S1 through 9.18.27-S1.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.04680 · 91.7th percentile
Published
2024-07-23T14:26Z
EPSS history
Timeline
  • 23 JUL 14:26Z
    A flood of DNS messages over TCP may make the server unstable
    cvelistv5