Ubuntu 24.04 LTS USN-6909-1 Critical: Bind Denial Of Service

Several security issues were fixed in Bind.

Software Description:

- bind9: Internet Domain Name Server

Details:

It was discovered that Bind incorrectly handled a flood of DNS messages

over TCP. A remote attacker could possibly use this issue to cause Bind to

become unstable, resulting in a denial of service. (CVE-2024-0760)

Toshifumi Sakaguchi discovered that Bind incorrectly handled having a very

large number of RRs existing at the same time. A remote attacker could

possibly use this issue to cause Bind to consume resources, leading to a

denial of service. (CVE-2024-1737)

It was discovered that Bind incorrectly handled a large number of SIG(0)

signed requests. A remote attacker could possibly use this issue to cause

Bind to consume resources, leading to a denial of service. (CVE-2024-1975)

Daniel Stränger discovered that Bind incorrectly handled serving both

stable cache data and authoritative zone content. A remote attacker could

possibly use this is...