Логотип exploitDog
bind:CVE-2024-12705
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-12705

Количество 11

Количество 11

ubuntu логотип

CVE-2024-12705

6 месяцев назад

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2024-12705

больше 1 года назад

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2024-12705

6 месяцев назад

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.

CVSS3: 7.5
EPSS: Низкий
msrc логотип

CVE-2024-12705

6 месяцев назад

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2024-12705

6 месяцев назад

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU an ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-gf34-2fpp-vmc4

6 месяцев назад

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.

CVSS3: 7.5
EPSS: Низкий
fstec логотип

BDU:2025-07734

7 месяцев назад

Уязвимость реализации DoH сервера DNS BIND, связанная с выделением неограниченной памяти, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:0355-1

6 месяцев назад

Security update for bind

EPSS: Низкий
redos логотип

ROS-20250710-01

28 дней назад

Уязвимость bind-dyndb-ldap

CVSS3: 7.5
EPSS: Низкий
oracle-oval логотип

ELSA-2025-1670

6 месяцев назад

ELSA-2025-1670: bind9.18 security update (IMPORTANT)

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2025:01787-1

2 месяца назад

Security update for bind

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-12705

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.

CVSS3: 7.5
0%
Низкий
6 месяцев назад
redhat логотип
CVE-2024-12705

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.

CVSS3: 7.5
0%
Низкий
больше 1 года назад
nvd логотип
CVE-2024-12705

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.

CVSS3: 7.5
0%
Низкий
6 месяцев назад
msrc логотип
CVSS3: 7.5
0%
Низкий
6 месяцев назад
debian логотип
CVE-2024-12705

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU an ...

CVSS3: 7.5
0%
Низкий
6 месяцев назад
github логотип
GHSA-gf34-2fpp-vmc4

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.

CVSS3: 7.5
0%
Низкий
6 месяцев назад
fstec логотип
BDU:2025-07734

Уязвимость реализации DoH сервера DNS BIND, связанная с выделением неограниченной памяти, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
0%
Низкий
7 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:0355-1

Security update for bind

6 месяцев назад
redos логотип
ROS-20250710-01

Уязвимость bind-dyndb-ldap

CVSS3: 7.5
0%
Низкий
28 дней назад
oracle-oval логотип
ELSA-2025-1670

ELSA-2025-1670: bind9.18 security update (IMPORTANT)

6 месяцев назад
suse-cvrf логотип
SUSE-SU-2025:01787-1

Security update for bind

2 месяца назад

Уязвимостей на страницу