CVE-2024-11187

Summary

CVE-2024-11187 is a vulnerability affecting various versions of BIND 9, including 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1. Maliciously crafted DNS queries can cause these versions of BIND 9 to consume significant resources when processing the responses. The impacted servers or independent resolvers may experience performance degradation due to the excessive processing required for these queries. Attackers would first need to create specially crafted zones to exploit this exposure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.