Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:1670 advisory.

    * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)
      * bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load     (CVE-2024-12705)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-1670 advisory.

    - Fix CVE-2024-11187 bind: bind9: Many records in the additional section cause CPU exhaustion

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:1670 advisory.

    BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND     includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for     applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating     properly.

    Security Fix(es):

    * bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)

    * bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load     (CVE-2024-12705)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2025-3551f3ba1b advisory.

    # Update to 9.16.33 (#2342784)     ##Security Fixes:

    -    DNS-over-HTTPS flooding fixes. (CVE-2024-12705)
    -    Limit additional section processing for large RDATA sets. (CVE-2024-11187)

    # New Features:

    -    Add a new option to configure the maximum number of outgoing queries per client request.

    # Bug Fixes:

    -    Fix nsupdate hang when processing a large update.
    -   Fix possible assertion failure when reloading server while processing update policy rules. [GL #5006]
    -   Fix dnssec-signzone signing non-DNSKEY RRsets with revoked keys.
    -   Fix improper handling of unknown directives in resolv.conf.

    [Upstream Release Notes](https://downloads.isc.org/isc/bind9/9.18.33/doc/arm/html/notes.html#notes-for-     bind-9-18-33)


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0355-1 advisory.

    Update to release 9.18.33

    Security Fixes:

    - CVE-2024-11187: Fixes CPU exhaustion caused by many records in the additional section (bsc#1236596)
    - CVE-2024-12705: Fixes multiple issues in DNS-over-HTTPS implementation when under heavy query load     (bsc#1236597)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-838 advisory.

    It is possible to construct a zone such that some queries to it will generate responses containing     numerous records in the Additional section. An attacker sending many such queries can cause either the     authoritative server itself or an independent resolver to use disproportionate resources processing the     queries. Zones will usually need to have been deliberately crafted to attack this exposure.This issue     affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0     through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and     9.18.11-S1 through 9.18.32-S1. (CVE-2024-11187)

    Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with     crafted valid or invalid HTTP/2 traffic.This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0     through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1. (CVE-2024-12705)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of bind installed on the remote host is prior to 9.11.4-26.P2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2751 advisory.

    It is possible to construct a zone such that some queries to it will generate responses containing     numerous records in the Additional section. An attacker sending many such queries can cause either the     authoritative server itself or an independent resolver to use disproportionate resources processing the     queries. Zones will usually need to have been deliberately crafted to attack this exposure.This issue     affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0     through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and     9.18.11-S1 through 9.18.32-S1. (CVE-2024-11187)

    Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with     crafted valid or invalid HTTP/2 traffic.This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0     through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1. (CVE-2024-12705)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7241-1 advisory.

    Toshifumi Sakaguchi discovered that Bind incorrectly handled many records in the additional section. A     remote attacker could possibly use this issue to cause Bind to consume CPU resources, leading to a denial     of service. (CVE-2024-11187)

    Jean-Franois Billaud discovered that the Bind DNS-over-HTTPS implementation incorrectly handled a heavy     query load. A remote attacker could possibly use this issue to cause Bind to consume resources, leading to     a denial of service. (CVE-2024-12705)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5854 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5854-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     January 29, 2025                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : bind9     CVE ID         : CVE-2024-11187 CVE-2024-12705

    Several vulnerabilities were discovered in BIND, a DNS server     implementation, which may result in denial of service.

    For the stable distribution (bookworm), these problems have been fixed in     version 1:9.18.33-1~deb12u2.

    We recommend that you upgrade your bind9 packages.

    For the detailed security status of bind9 please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/bind9

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of bind installed on the remote host is prior to 9.18.33 / 9.20.5. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-029-01 advisory.

    New bind packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the bind security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
216687	AlmaLinux 9 : bind9.18 (ALSA-2025:1670)	Nessus	Alma Linux Local Security Checks	high
216615	Oracle Linux 9 : bind9.18 (ELSA-2025-1670)	Nessus	Oracle Linux Local Security Checks	high
216489	RHEL 9 : bind9.18 (RHSA-2025:1670)	Nessus	Red Hat Local Security Checks	high
216157	Fedora 41 : bind / bind-dyndb-ldap (2025-3551f3ba1b)	Nessus	Fedora Local Security Checks	high
215184	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : bind (SUSE-SU-2025:0355-1)	Nessus	SuSE Local Security Checks	high
215038	Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2025-838)	Nessus	Amazon Linux Local Security Checks	high
214980	Amazon Linux 2 : bind (ALAS-2025-2751)	Nessus	Amazon Linux Local Security Checks	high
214790	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Bind vulnerabilities (USN-7241-1)	Nessus	Ubuntu Local Security Checks	high
214787	Debian dsa-5854 : bind9 - security update	Nessus	Debian Local Security Checks	high
214786	Slackware Linux 15.0 / current bind Multiple Vulnerabilities (SSA:2025-029-01)	Nessus	Slackware Local Security Checks	high

Detections

Analytics

CVE-2024-12705

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high