Every CVE Search/ Get API key

CVE-2024-11187

Many records in the additional section cause CPU exhaustion

7.5 HighFix available

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

16.0%Up 16.0 points since Jan 30, 2025
90%50%10%1%

What each source reports

CVE List Score used 7.5

Many records in the additional section cause CPU exhaustion

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.

Record
CVE-2024-11187
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-405
Updated
2026-11-02
EUVDEUVD-2024-34391 7.5

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.

Record
EUVD-2024-34391
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-w8w2-83mf-6cp5 7.5

It is possible to construct a zone such that some queries to it will generate responses...

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.

Record
GHSA-w8w2-83mf-6cp5
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-405
Updated
2026-11-02
NVD 7.5

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.

Record
CVE-2024-11187
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-405
Updated
2026-11-02
OSVALPINE-CVE-2024-11187 7.5

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.

Record
ALPINE-CVE-2024-11187
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2024-11187 7.5
Record
BELL-CVE-2024-11187
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 46 moreShow less
OSVDEBIAN-CVE-2024-11187 7.5

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.

Record
DEBIAN-CVE-2024-11187
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1105 7.5

bind security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.(CVE-2024-11187)

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.(CVE-2024-12705)

Record
OESA-2025-1105
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1106 7.5

bind security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.(CVE-2024-11187)

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.(CVE-2024-12705)

Record
OESA-2025-1106
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1172 7.5

bind security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.(CVE-2024-11187)

Record
OESA-2025-1172
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1215 7.5

bind security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.(CVE-2024-11187)

Record
OESA-2025-1215
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1341 7.5

dhcp security update

The Dynamic Host Configuration Protocol (DHCP) is a network management protocol used on UDP/IP networks whereby a DHCP server dynamically assigns an IP address and other network configuration parameters to each device on a network so they can communicate with other IP networks.

Security Fix(es):

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.(CVE-2024-11187)

Record
OESA-2025-1341
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2025-1558 7.5

bind security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.(CVE-2024-11187)

Record
OESA-2025-1558
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1664 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2025:1664
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1665 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2025:1665
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1666 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2025:1666
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1669 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2025:1669
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1670 7.5

Red Hat Security Advisory: bind9.18 security update

Record
RHSA-2025:1670
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1674 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2025:1674
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1675 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2025:1675
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1676 7.5

Red Hat Security Advisory: bind9.16 security update

Record
RHSA-2025:1676
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1678 7.5

Red Hat Security Advisory: bind9.16 security update

Record
RHSA-2025:1678
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1679 7.5

Red Hat Security Advisory: bind9.16 security update

Record
RHSA-2025:1679
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1681 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2025:1681
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1684 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2025:1684
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1685 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2025:1685
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1687 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2025:1687
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1691 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2025:1691
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:1718 7.5

Red Hat Security Advisory: bind security update

Record
RHSA-2025:1718
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-11187 7.5

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.

Record
UBUNTU-CVE-2024-11187
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2025:1670 No score

Important: bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

  • bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)
  • bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load (CVE-2024-12705)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:1670
Updated
2026-11-02
OSVALSA-2025:1675 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:1675
Updated
2026-11-02
OSVALSA-2025:1676 No score

Important: bind9.16 security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:1676
Updated
2026-11-02
OSVALSA-2025:1681 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:1681
Updated
2026-11-02
OSVAZL-56093 No score

CVE-2024-11187 affecting package bind for versions less than 9.16.50-2

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.

Record
AZL-56093
Updated
2026-11-02
OSVAZL-56097 No score

CVE-2024-11187 affecting package bind for versions less than 9.20.5-1

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.

Record
AZL-56097
Updated
2026-11-02
OSVAZL-56198 No score

CVE-2024-11187 affecting package dhcp for versions less than 4.4.3.P1-3

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.

Record
AZL-56198
Updated
2026-11-02
OSVCLSA-2025-1740823520 No score

bind: Fix of CVE-2024-11187

  • CVE-2024-11187: Limit the additional processing for large RDATA sets
Record
CLSA-2025-1740823520
Updated
2026-11-02
OSVCLSA-2025-1740823729 No score

bind: Fix of CVE-2024-11187

  • CVE-2024-11187: limit additional section record while queries processing to prevent CPU exhaustion
Record
CLSA-2025-1740823729
Updated
2026-11-02
OSVCLSA-2025-1740823970 No score

bind: Fix of CVE-2024-11187

  • CVE-2024-11187: Limit the additional processing for large RDATA sets
Record
CLSA-2025-1740823970
Updated
2026-11-02
OSVCLSA-2025-1741126041 No score

bind: Fix of CVE-2024-11187

  • CVE-2024-11187: fix excessive resource usage by limiting additional section processing and adjusting resolver tests
Record
CLSA-2025-1741126041
Updated
2026-11-02
OSVCLSA-2025-1741216108 No score

bind: Fix of CVE-2024-11187

  • CVE-2024-11187: limit additional section record while queries processing to prevent CPU exhaustion
Record
CLSA-2025-1741216108
Updated
2026-11-02
OSVCLSA-2025-1741216137 No score

bind: Fix of CVE-2024-11187

  • CVE-2024-11187: limit additional section record while queries processing to prevent CPU exhaustion
Record
CLSA-2025-1741216137
Updated
2026-11-02
OSVCLSA-2025-1741216880 No score

bind: Fix of CVE-2024-11187

  • CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9
Record
CLSA-2025-1741216880
Updated
2026-11-02
OSVCLSA-2025-1741624657 No score

bind: Fix of CVE-2024-11187

  • CVE-2024-11187: fix Denial of Service via Additional Section Resource Exhaustion in BIND 9
Record
CLSA-2025-1741624657
Updated
2026-11-02
OSV No score

It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.

Record
CVE-2024-11187
Updated
2026-11-02
OSVMGASA-2025-0036 No score

Updated bind packages fix security vulnerabilities

Many records in the additional section cause CPU exhaustion. (CVE-2024-11187) DNS-over-HTTPS implementation suffers from multiple issues under heavy query load. (CVE-2024-12705)

Record
MGASA-2025-0036
Updated
2026-11-02
OSVopenSUSE-SU-2025:14719-1 No score

bind-9.20.5-1.1 on GA media

These are all security issues fixed in the bind-9.20.5-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14719-1
Updated
2026-11-02
OSVRLSA-2025:1670 No score

Important: bind9.18 security update

BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.

Security Fix(es):

  • bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)

  • bind: bind9: DNS-over-HTTPS implementation suffers from multiple issues under heavy query load (CVE-2024-12705)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:1670
Updated
2026-11-02
OSVRLSA-2025:1675 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:1675
Updated
2026-11-02
OSVRLSA-2025:1676 No score

Important: bind9.16 security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:1676
Updated
2026-11-02
OSVRLSA-2025:1681 No score

Important: bind security update

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

  • bind: bind9: Many records in the additional section cause CPU exhaustion (CVE-2024-11187)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:1681
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
bind
Alpine:v3.18
 before 9.18.33-r0
9.18.33-r0
bind
Alpine:v3.19
 before 9.18.33-r0
9.18.33-r0
bind
Alpine:v3.20
 before 9.18.33-r0
9.18.33-r0
bind
Alpine:v3.21
 before 9.18.33-r0
9.18.33-r0
bind
Alpine:v3.22
 before 9.18.33-r0
9.18.33-r0
bind
Alpine:v3.23
 before 9.18.33-r0
9.18.33-r0
bind
Alpine:v3.24
 before 9.18.33-r0
9.18.33-r0
bind9.18
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-1.el9_5.1
32:9.18.29-1.el9_5.1
bind9.18-chroot
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-1.el9_5.1
32:9.18.29-1.el9_5.1
bind9.18-devel
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-1.el9_5.1
32:9.18.29-1.el9_5.1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
bind9.18-dnssec-utils
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-1.el9_5.1
32:9.18.29-1.el9_5.1
bind9.18-doc
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-1.el9_5.1
32:9.18.29-1.el9_5.1
bind9.18-libs
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-1.el9_5.1
32:9.18.29-1.el9_5.1
bind9.18-utils
AlmaLinux:9
From an advisory covering 2 CVEs
 before 32:9.18.29-1.el9_5.1
32:9.18.29-1.el9_5.1
bind
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind-chroot
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind-devel
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind-export-devel
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind-export-libs
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind-libs
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind-libs-lite
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind-license
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind-lite-devel
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind-pkcs11
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind-pkcs11-devel
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind-pkcs11-libs
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind-pkcs11-utils
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind-sdb
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind-sdb-chroot
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind-utils
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
python3-bind
AlmaLinux:8
 before 32:9.11.36-16.el8_10.4
32:9.11.36-16.el8_10.4
bind9.16
AlmaLinux:8
 before 32:9.16.23-0.22.el8_10.2
32:9.16.23-0.22.el8_10.2
bind9.16-chroot
AlmaLinux:8
 before 32:9.16.23-0.22.el8_10.2
32:9.16.23-0.22.el8_10.2
bind9.16-devel
AlmaLinux:8
 before 32:9.16.23-0.22.el8_10.2
32:9.16.23-0.22.el8_10.2
bind9.16-dnssec-utils
AlmaLinux:8
 before 32:9.16.23-0.22.el8_10.2
32:9.16.23-0.22.el8_10.2
bind9.16-doc
AlmaLinux:8
 before 32:9.16.23-0.22.el8_10.2
32:9.16.23-0.22.el8_10.2
bind9.16-libs
AlmaLinux:8
 before 32:9.16.23-0.22.el8_10.2
32:9.16.23-0.22.el8_10.2
bind9.16-license
AlmaLinux:8
 before 32:9.16.23-0.22.el8_10.2
32:9.16.23-0.22.el8_10.2
bind9.16-utils
AlmaLinux:8
 before 32:9.16.23-0.22.el8_10.2
32:9.16.23-0.22.el8_10.2
python3-bind9.16
AlmaLinux:8
 before 32:9.16.23-0.22.el8_10.2
32:9.16.23-0.22.el8_10.2
bind
AlmaLinux:9
 before 32:9.16.23-24.el9_5.3
32:9.16.23-24.el9_5.3
bind-chroot
AlmaLinux:9
 before 32:9.16.23-24.el9_5.3
32:9.16.23-24.el9_5.3
bind-devel
AlmaLinux:9
 before 32:9.16.23-24.el9_5.3
32:9.16.23-24.el9_5.3
bind-dnssec-doc
AlmaLinux:9
 before 32:9.16.23-24.el9_5.3
32:9.16.23-24.el9_5.3
bind-dnssec-utils
AlmaLinux:9
 before 32:9.16.23-24.el9_5.3
32:9.16.23-24.el9_5.3
bind-doc
AlmaLinux:9
 before 32:9.16.23-24.el9_5.3
32:9.16.23-24.el9_5.3
bind-libs
AlmaLinux:9
 before 32:9.16.23-24.el9_5.3
32:9.16.23-24.el9_5.3
bind-license
AlmaLinux:9
 before 32:9.16.23-24.el9_5.3
32:9.16.23-24.el9_5.3
bind-utils
AlmaLinux:9
 before 32:9.16.23-24.el9_5.3
32:9.16.23-24.el9_5.3
python3-bind
AlmaLinux:9
 before 32:9.16.23-24.el9_5.3
32:9.16.23-24.el9_5.3
bind
Azure Linux:2
 before 9.16.50-2
9.16.50-2
bind
Azure Linux:3
 before 9.20.5-1
9.20.5-1
dhcp
Azure Linux:2
 before 4.4.3.P1-3
4.4.3.P1-3
bind
Alpaquita:23
 9.18.31-r0 up to 9.18.33-r0
9.18.33-r0
bind
Alpaquita:stream
 9.18.32-r0 up to 9.18.33-r0
9.18.33-r0
bind
TuxCare:OracleLinux:6
 before 33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
bind-chroot
TuxCare:OracleLinux:6
 before 33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
bind-devel
TuxCare:OracleLinux:6
 before 33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
bind-libs
TuxCare:OracleLinux:6
 before 33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
bind-sdb
TuxCare:OracleLinux:6
 before 33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
bind-utils
TuxCare:OracleLinux:6
 before 33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
bind
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind-chroot
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind-devel
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind-export-devel
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind-export-libs
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind-libs
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind-libs-lite
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind-license
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind-lite-devel
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind-pkcs11
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind-pkcs11-devel
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind-pkcs11-libs
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind-pkcs11-utils
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind-sdb
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind-sdb-chroot
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind-utils
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
python3-bind
TuxCare:CentOS:8.5
 before 32:9.11.26-6.el8.tuxcare.els11
32:9.11.26-6.el8.tuxcare.els11
bind
TuxCare:CentOS:6
 before 33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
bind-chroot
TuxCare:CentOS:6
 before 33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
bind-devel
TuxCare:CentOS:6
 before 33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
bind-libs
TuxCare:CentOS:6
 before 33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
bind-sdb
TuxCare:CentOS:6
 before 33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
bind-utils
TuxCare:CentOS:6
 before 33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
33:9.8.2-0.68.rc1.el6.11.tuxcare.els10
bind
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els7
32:9.16.23-11.el9_2.2.tuxcare.els7
bind-chroot
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els7
32:9.16.23-11.el9_2.2.tuxcare.els7
bind-devel
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els7
32:9.16.23-11.el9_2.2.tuxcare.els7
bind-dnssec-doc
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els7
32:9.16.23-11.el9_2.2.tuxcare.els7
bind-dnssec-utils
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els7
32:9.16.23-11.el9_2.2.tuxcare.els7
bind-doc
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els7
32:9.16.23-11.el9_2.2.tuxcare.els7
bind-libs
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els7
32:9.16.23-11.el9_2.2.tuxcare.els7
bind-license
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els7
32:9.16.23-11.el9_2.2.tuxcare.els7
bind-utils
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els7
32:9.16.23-11.el9_2.2.tuxcare.els7
python3-bind
TuxCare:AlmaLinux:9.2
 before 32:9.16.23-11.el9_2.2.tuxcare.els7
32:9.16.23-11.el9_2.2.tuxcare.els7
bind
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind-chroot
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind-devel
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind-export-devel
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind-export-libs
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind-libs
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind-libs-lite
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind-license
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind-lite-devel
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind-pkcs11
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind-pkcs11-devel
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind-pkcs11-libs
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind-pkcs11-utils
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind-sdb
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind-sdb-chroot
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind-utils
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
python3-bind
TuxCare:CentOS-Stream:8
 before 32:9.11.36-13.el8.tuxcare.els5
32:9.11.36-13.el8.tuxcare.els5
bind
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind-chroot
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind-devel
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind-export-devel
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind-export-libs
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind-libs
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind-libs-lite
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind-license
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind-lite-devel
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind-pkcs11
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind-pkcs11-devel
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind-pkcs11-libs
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind-pkcs11-utils
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind-sdb
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind-sdb-chroot
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind-utils
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
python3-bind
TuxCare:CentOS:8.4
 before 32:9.11.26-4.el8.4.tuxcare.els12
32:9.11.26-4.el8.4.tuxcare.els12
bind
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind-chroot
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind-devel
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind-export-devel
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind-export-libs
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind-libs
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind-libs-lite
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind-license
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind-lite-devel
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind-pkcs11
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind-pkcs11-devel
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind-pkcs11-libs
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind-pkcs11-utils
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind-sdb
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind-sdb-chroot
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind-utils
TuxCare:CentOS:7
 before 33:9.11.4-26.P2.el7_9.16.tuxcare.els6
33:9.11.4-26.P2.el7_9.16.tuxcare.els6
bind
TuxCare:OracleLinux:7
 before 32:9.11.4-26.0.1.P2.el7_9.16.tuxcare.els1
32:9.11.4-26.0.1.P2.el7_9.16.tuxcare.els1
bind-chroot
TuxCare:OracleLinux:7
 before 32:9.11.4-26.0.1.P2.el7_9.16.tuxcare.els1
32:9.11.4-26.0.1.P2.el7_9.16.tuxcare.els1
bind-devel
TuxCare:OracleLinux:7
 before 32:9.11.4-26.0.1.P2.el7_9.16.tuxcare.els1
32:9.11.4-26.0.1.P2.el7_9.16.tuxcare.els1
bind-export-devel
TuxCare:OracleLinux:7
 before 32:9.11.4-26.0.1.P2.el7_9.16.tuxcare.els1
32:9.11.4-26.0.1.P2.el7_9.16.tuxcare.els1
bind-export-libs
TuxCare:OracleLinux:7
 before 32:9.11.4-26.0.1.P2.el7_9.16.tuxcare.els1
32:9.11.4-26.0.1.P2.el7_9.16.tuxcare.els1
bind9
Debian:12
 before 1:9.18.33-1~deb12u2, plus listed versions
1:9.18.12-11:9.18.13-11:9.18.16-11:9.18.16-1~deb12u11:9.18.16-1~deb12u1~bpo11+1
Show 6 moreShow less
1:9.18.19-1~deb12u11:9.18.19-1~deb12u1~bpo11+11:9.18.24-11:9.18.24-1~bpo11+11:9.18.28-1~deb12u11:9.18.28-1~deb12u2
1:9.18.33-1~deb12u2
bind9
Debian:13
 before 1:9.20.5-1
1:9.20.5-1
bind9
Debian:14
 before 1:9.20.5-1
1:9.20.5-1
bind9
Debian:11
 before 1:9.16.50-1~deb11u3, plus listed versions
1:9.16.15-11:9.16.21-11:9.16.21-1+hurd.11:9.16.22-1~deb11u11:9.16.22-1~deb11u1~bpo10+1
Show 9 moreShow less
1:9.16.27-1~deb11u11:9.16.27-1~deb11u1~bpo10+11:9.16.33-1~deb11u11:9.16.37-1~deb11u11:9.16.42-1~deb11u11:9.16.44-1~deb11u11:9.16.48-11:9.16.50-1~deb11u11:9.16.50-1~deb11u2
1:9.16.50-1~deb11u3
bind9
Debian:12
From an advisory covering 2 CVEs
 before 1:9.18.33-1~deb12u2, plus listed versions
1:9.18.12-11:9.18.13-11:9.18.16-11:9.18.16-1~deb12u11:9.18.16-1~deb12u1~bpo11+1
Show 6 moreShow less
1:9.18.19-1~deb12u11:9.18.19-1~deb12u1~bpo11+11:9.18.24-11:9.18.24-1~bpo11+11:9.18.28-1~deb12u11:9.18.28-1~deb12u2
1:9.18.33-1~deb12u2
bind
Mageia:9
From an advisory covering 2 CVEs
 before 9.18.33-1.mga9
9.18.33-1.mga9
bind
openEuler:24.03-LTS
From an advisory covering 2 CVEs
 before 9.18.21-4.oe2403
9.18.21-4.oe2403
bind
openEuler:24.03-LTS-SP1
From an advisory covering 2 CVEs
 before 9.18.21-4.oe2403sp1
9.18.21-4.oe2403sp1
bind
openEuler:22.03-LTS-SP3
 before 9.16.23-24.oe2203sp3
9.16.23-24.oe2203sp3
bind
openEuler:22.03-LTS-SP4
 before 9.16.23-24.oe2203sp4
9.16.23-24.oe2203sp4
dhcp
openEuler:20.03-LTS-SP4
 before 4.4.2-14.oe2003sp4
4.4.2-14.oe2003sp4
dhcp
openEuler:22.03-LTS-SP3
 before 4.4.3-9.oe2203sp3
4.4.3-9.oe2203sp3
dhcp
openEuler:22.03-LTS-SP4
 before 4.4.3-9.oe2203sp4
4.4.3-9.oe2203sp4
dhcp
openEuler:24.03-LTS
 before 4.4.3-10.oe2403sp1
4.4.3-10.oe2403sp1
dhcp
openEuler:24.03-LTS-SP1
 before 4.4.3-10.oe2403sp1
4.4.3-10.oe2403sp1
bind
openEuler:20.03-LTS-SP4
 before 9.11.21-20.oe2003sp4
9.11.21-20.oe2003sp4
bind
Red Hat:rhel_e4s:9.0::appstream
 before 32:9.16.23-1.el9_0.10
32:9.16.23-1.el9_0.10
bind-chroot
Red Hat:rhel_e4s:9.0::appstream
 before 32:9.16.23-1.el9_0.10
32:9.16.23-1.el9_0.10
bind-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 32:9.16.23-1.el9_0.10
32:9.16.23-1.el9_0.10
bind-debugsource
Red Hat:rhel_e4s:9.0::appstream
 before 32:9.16.23-1.el9_0.10
32:9.16.23-1.el9_0.10
bind-dnssec-doc
Red Hat:rhel_e4s:9.0::appstream
 before 32:9.16.23-1.el9_0.10
32:9.16.23-1.el9_0.10
bind-dnssec-utils
Red Hat:rhel_e4s:9.0::appstream
 before 32:9.16.23-1.el9_0.10
32:9.16.23-1.el9_0.10
bind-dnssec-utils-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 32:9.16.23-1.el9_0.10
32:9.16.23-1.el9_0.10
bind-libs
Red Hat:rhel_e4s:9.0::appstream
 before 32:9.16.23-1.el9_0.10
32:9.16.23-1.el9_0.10
bind-libs-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 32:9.16.23-1.el9_0.10
32:9.16.23-1.el9_0.10
bind-license
Red Hat:rhel_e4s:9.0::appstream
 before 32:9.16.23-1.el9_0.10
32:9.16.23-1.el9_0.10
bind-utils
Red Hat:rhel_e4s:9.0::appstream
 before 32:9.16.23-1.el9_0.10
32:9.16.23-1.el9_0.10
bind-utils-debuginfo
Red Hat:rhel_e4s:9.0::appstream
 before 32:9.16.23-1.el9_0.10
32:9.16.23-1.el9_0.10
python3-bind
Red Hat:rhel_e4s:9.0::appstream
 before 32:9.16.23-1.el9_0.10
32:9.16.23-1.el9_0.10
bind
Red Hat:rhel_eus:9.2::appstream
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-chroot
Red Hat:rhel_eus:9.2::appstream
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-debugsource
Red Hat:rhel_eus:9.2::appstream
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-dnssec-doc
Red Hat:rhel_eus:9.2::appstream
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-dnssec-utils
Red Hat:rhel_eus:9.2::appstream
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-dnssec-utils-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-libs
Red Hat:rhel_eus:9.2::appstream
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-libs-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-license
Red Hat:rhel_eus:9.2::appstream
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-utils
Red Hat:rhel_eus:9.2::appstream
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-utils-debuginfo
Red Hat:rhel_eus:9.2::appstream
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
python3-bind
Red Hat:rhel_eus:9.2::appstream
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-debuginfo
Red Hat:rhel_eus:9.2::crb
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-debugsource
Red Hat:rhel_eus:9.2::crb
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-devel
Red Hat:rhel_eus:9.2::crb
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-dnssec-utils-debuginfo
Red Hat:rhel_eus:9.2::crb
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-doc
Red Hat:rhel_eus:9.2::crb
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-libs
Red Hat:rhel_eus:9.2::crb
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-libs-debuginfo
Red Hat:rhel_eus:9.2::crb
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind-utils-debuginfo
Red Hat:rhel_eus:9.2::crb
 before 32:9.16.23-11.el9_2.8
32:9.16.23-11.el9_2.8
bind
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-chroot
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-debugsource
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-devel
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-export-libs-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-libs
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-libs-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-libs-lite
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-libs-lite-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-license
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-lite-devel
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-pkcs11
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-pkcs11-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-pkcs11-devel
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-pkcs11-libs
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-pkcs11-libs-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-pkcs11-utils
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-pkcs11-utils-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-sdb
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-sdb-chroot
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-sdb-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-utils
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-utils-debuginfo
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
python3-bind
Red Hat:rhel_eus:8.8::appstream
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind
Red Hat:rhel_eus:8.8::baseos
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-debuginfo
Red Hat:rhel_eus:8.8::baseos
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-debugsource
Red Hat:rhel_eus:8.8::baseos
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-export-devel
Red Hat:rhel_eus:8.8::baseos
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-export-libs
Red Hat:rhel_eus:8.8::baseos
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-export-libs-debuginfo
Red Hat:rhel_eus:8.8::baseos
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-libs-debuginfo
Red Hat:rhel_eus:8.8::baseos
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-libs-lite-debuginfo
Red Hat:rhel_eus:8.8::baseos
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-pkcs11-debuginfo
Red Hat:rhel_eus:8.8::baseos
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-pkcs11-libs-debuginfo
Red Hat:rhel_eus:8.8::baseos
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-pkcs11-utils-debuginfo
Red Hat:rhel_eus:8.8::baseos
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-sdb-debuginfo
Red Hat:rhel_eus:8.8::baseos
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind-utils-debuginfo
Red Hat:rhel_eus:8.8::baseos
 before 32:9.11.36-8.el8_8.7
32:9.11.36-8.el8_8.7
bind
Red Hat:rhel_eus:9.4::appstream
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-chroot
Red Hat:rhel_eus:9.4::appstream
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-debugsource
Red Hat:rhel_eus:9.4::appstream
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-dnssec-doc
Red Hat:rhel_eus:9.4::appstream
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-dnssec-utils
Red Hat:rhel_eus:9.4::appstream
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-dnssec-utils-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-libs
Red Hat:rhel_eus:9.4::appstream
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-libs-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-license
Red Hat:rhel_eus:9.4::appstream
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-utils
Red Hat:rhel_eus:9.4::appstream
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-utils-debuginfo
Red Hat:rhel_eus:9.4::appstream
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
python3-bind
Red Hat:rhel_eus:9.4::appstream
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-debuginfo
Red Hat:rhel_eus:9.4::crb
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-debugsource
Red Hat:rhel_eus:9.4::crb
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-devel
Red Hat:rhel_eus:9.4::crb
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-dnssec-utils-debuginfo
Red Hat:rhel_eus:9.4::crb
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-doc
Red Hat:rhel_eus:9.4::crb
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-libs
Red Hat:rhel_eus:9.4::crb
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-libs-debuginfo
Red Hat:rhel_eus:9.4::crb
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind-utils-debuginfo
Red Hat:rhel_eus:9.4::crb
 before 32:9.16.23-18.el9_4.9
32:9.16.23-18.el9_4.9
bind9.18
Rocky Linux:9
From an advisory covering 2 CVEs
 before 2:9.18.29-1.el9_5.1
2:9.18.29-1.el9_5.1
bind
Rocky Linux:8
 before 2:9.11.36-16.el8_10.4
2:9.11.36-16.el8_10.4
bind9.16
Rocky Linux:8
 before 2:9.16.23-0.22.el8_10.2
2:9.16.23-0.22.el8_10.2
bind
Rocky Linux:9
 before 2:9.16.23-24.el9_5.3
2:9.16.23-24.el9_5.3
bind
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 3 CVEs
 before 9.20.9-150700.3.3.1
9.20.9-150700.3.3.1
bind
SUSE:Linux Enterprise Module for Server Applications 15 SP7
From an advisory covering 3 CVEs
 before 9.20.9-150700.3.3.1
9.20.9-150700.3.3.1
bind
SUSE:Manager Client Tools for SLE Micro 5
 before 9.16.6-150000.12.80.1
9.16.6-150000.12.80.1
bind
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
 before 9.18.33-150600.3.6.1
9.18.33-150600.3.6.1
bind
SUSE:Linux Enterprise Module for Server Applications 15 SP6
From an advisory covering 2 CVEs
 before 9.18.33-150600.3.6.1
9.18.33-150600.3.6.1
bind
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 9.18.33-150600.3.6.1
9.18.33-150600.3.6.1
bind
SUSE:Linux Enterprise Micro 5.5
 before 9.16.50-150500.8.24.1
9.16.50-150500.8.24.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
 before 9.16.50-150500.8.24.1
9.16.50-150500.8.24.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
 before 9.16.50-150500.8.24.1
9.16.50-150500.8.24.1
bind
SUSE:Linux Enterprise Server 15 SP5-LTSS
 before 9.16.50-150500.8.24.1
9.16.50-150500.8.24.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
 before 9.16.50-150500.8.24.1
9.16.50-150500.8.24.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 9.16.50-150400.5.46.1
9.16.50-150400.5.46.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 9.16.50-150400.5.46.1
9.16.50-150400.5.46.1
bind
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 9.16.50-150400.5.46.1
9.16.50-150400.5.46.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 9.16.50-150400.5.46.1
9.16.50-150400.5.46.1
bind
SUSE:Manager Proxy 4.3
 before 9.16.50-150400.5.46.1
9.16.50-150400.5.46.1
bind
SUSE:Manager Server 4.3
 before 9.16.50-150400.5.46.1
9.16.50-150400.5.46.1
bind
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 9.11.22-3.60.2
9.11.22-3.60.2
bind
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 9.11.22-3.60.2
9.11.22-3.60.2
bind
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 9.16.6-150300.22.50.1
9.16.6-150300.22.50.1
bind
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 9.16.6-150300.22.50.1
9.16.6-150300.22.50.1
bind
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 9.16.6-150300.22.50.1
9.16.6-150300.22.50.1
bind
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 9.16.6-150300.22.50.1
9.16.6-150300.22.50.1
bind
SUSE:Enterprise Storage 7.1
 before 9.16.6-150300.22.50.1
9.16.6-150300.22.50.1
bind9
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1:9.10.3.dfsg.P4-12.6ubuntu11:9.11.2.P1-1ubuntu21:9.11.2.P1-1ubuntu31:9.11.2.P1-1ubuntu41:9.11.2.P1-1ubuntu5
Show 23 moreShow less
1:9.11.3+dfsg-1ubuntu11:9.11.3+dfsg-1ubuntu1.11:9.11.3+dfsg-1ubuntu1.21:9.11.3+dfsg-1ubuntu1.31:9.11.3+dfsg-1ubuntu1.51:9.11.3+dfsg-1ubuntu1.71:9.11.3+dfsg-1ubuntu1.81:9.11.3+dfsg-1ubuntu1.91:9.11.3+dfsg-1ubuntu1.101:9.11.3+dfsg-1ubuntu1.111:9.11.3+dfsg-1ubuntu1.121:9.11.3+dfsg-1ubuntu1.131:9.11.3+dfsg-1ubuntu1.141:9.11.3+dfsg-1ubuntu1.151:9.11.3+dfsg-1ubuntu1.161:9.11.3+dfsg-1ubuntu1.171:9.11.3+dfsg-1ubuntu1.181:9.11.3+dfsg-1ubuntu1.19+esm11:9.11.3+dfsg-1ubuntu1.19+esm21:9.11.3+dfsg-1ubuntu1.19+esm31:9.11.3+dfsg-1ubuntu1.19+esm41:9.11.3+dfsg-1ubuntu1.19+esm51:9.11.3+dfsg-1ubuntu1.19+esm6
 None known
isc-dhcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.3.5-3ubuntu24.3.5-3ubuntu34.3.5-3ubuntu44.3.5-3ubuntu54.3.5-3ubuntu6
Show 5 moreShow less
4.3.5-3ubuntu74.3.5-3ubuntu7.14.3.5-3ubuntu7.24.3.5-3ubuntu7.34.3.5-3ubuntu7.4
 None known
bind9
Ubuntu:20.04:LTS
 before 1:9.18.30-0ubuntu0.20.04.2, plus listed versions
1:9.11.5.P4+dfsg-5.1ubuntu21:9.11.5.P4+dfsg-5.1ubuntu31:9.11.5.P4+dfsg-5.1ubuntu41:9.11.5.P4+dfsg-5.1ubuntu51:9.11.14+dfsg-1ubuntu1
Show 23 moreShow less
1:9.11.14+dfsg-3ubuntu11:9.16.0-1ubuntu31:9.16.0-1ubuntu41:9.16.0-1ubuntu51:9.16.1-0ubuntu11:9.16.1-0ubuntu21:9.16.1-0ubuntu2.11:9.16.1-0ubuntu2.21:9.16.1-0ubuntu2.31:9.16.1-0ubuntu2.41:9.16.1-0ubuntu2.61:9.16.1-0ubuntu2.71:9.16.1-0ubuntu2.81:9.16.1-0ubuntu2.91:9.16.1-0ubuntu2.101:9.16.1-0ubuntu2.111:9.16.1-0ubuntu2.121:9.16.1-0ubuntu2.141:9.16.1-0ubuntu2.151:9.16.1-0ubuntu2.161:9.16.48-0ubuntu0.20.04.11:9.18.28-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.1
1:9.18.30-0ubuntu0.20.04.2
bind9-libs
Ubuntu:20.04:LTS
 All versions, plus listed versions
1:9.11.16+dfsg-3~build11:9.11.16+dfsg-3~ubuntu1
 None known
bind9
Ubuntu:22.04:LTS
 before 1:9.18.30-0ubuntu0.22.04.2, plus listed versions
1:9.16.15-1ubuntu11:9.16.15-1ubuntu21:9.16.15-1ubuntu31:9.18.0-2ubuntu11:9.18.0-2ubuntu2
Show 13 moreShow less
1:9.18.0-2ubuntu31:9.18.1-1ubuntu11:9.18.1-1ubuntu1.11:9.18.1-1ubuntu1.21:9.18.1-1ubuntu1.31:9.18.12-0ubuntu0.22.04.11:9.18.12-0ubuntu0.22.04.21:9.18.12-0ubuntu0.22.04.31:9.18.18-0ubuntu0.22.04.11:9.18.18-0ubuntu0.22.04.21:9.18.24-0ubuntu0.22.04.11:9.18.28-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.1
1:9.18.30-0ubuntu0.22.04.2
bind9-libs
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:9.11.19+dfsg-2.1ubuntu11:9.11.19+dfsg-2.1ubuntu21:9.11.19+dfsg-2.1ubuntu3
 None known
bind9
Ubuntu:24.04:LTS
 before 1:9.18.30-0ubuntu0.24.04.2, plus listed versions
1:9.18.18-0ubuntu21:9.18.21-0ubuntu11:9.18.24-0ubuntu31:9.18.24-0ubuntu41:9.18.24-0ubuntu51:9.18.28-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.1
1:9.18.30-0ubuntu0.24.04.2
isc-dhcp
Ubuntu:24.04:LTS
 All versions, plus listed versions
4.4.3-P1-2ubuntu54.4.3-P1-4ubuntu14.4.3-P1-4ubuntu2
 None known
isc-dhcp
Ubuntu:25.10
 All versions, plus listed versions
4.4.3-P1-4ubuntu2
 None known
isc-dhcp
Ubuntu:26.04:LTS
 All versions, plus listed versions
4.4.3-P1-4ubuntu2
 None known
bind9
Ubuntu:20.04:LTS
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.20.04.2, plus listed versions
1:9.11.5.P4+dfsg-5.1ubuntu21:9.11.5.P4+dfsg-5.1ubuntu31:9.11.5.P4+dfsg-5.1ubuntu41:9.11.5.P4+dfsg-5.1ubuntu51:9.11.14+dfsg-1ubuntu1
Show 23 moreShow less
1:9.11.14+dfsg-3ubuntu11:9.16.0-1ubuntu31:9.16.0-1ubuntu41:9.16.0-1ubuntu51:9.16.1-0ubuntu11:9.16.1-0ubuntu21:9.16.1-0ubuntu2.11:9.16.1-0ubuntu2.21:9.16.1-0ubuntu2.31:9.16.1-0ubuntu2.41:9.16.1-0ubuntu2.61:9.16.1-0ubuntu2.71:9.16.1-0ubuntu2.81:9.16.1-0ubuntu2.91:9.16.1-0ubuntu2.101:9.16.1-0ubuntu2.111:9.16.1-0ubuntu2.121:9.16.1-0ubuntu2.141:9.16.1-0ubuntu2.151:9.16.1-0ubuntu2.161:9.16.48-0ubuntu0.20.04.11:9.18.28-0ubuntu0.20.04.11:9.18.30-0ubuntu0.20.04.1
1:9.18.30-0ubuntu0.20.04.2
bind9
Ubuntu:22.04:LTS
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.22.04.2, plus listed versions
1:9.16.15-1ubuntu11:9.16.15-1ubuntu21:9.16.15-1ubuntu31:9.18.0-2ubuntu11:9.18.0-2ubuntu2
Show 13 moreShow less
1:9.18.0-2ubuntu31:9.18.1-1ubuntu11:9.18.1-1ubuntu1.11:9.18.1-1ubuntu1.21:9.18.1-1ubuntu1.31:9.18.12-0ubuntu0.22.04.11:9.18.12-0ubuntu0.22.04.21:9.18.12-0ubuntu0.22.04.31:9.18.18-0ubuntu0.22.04.11:9.18.18-0ubuntu0.22.04.21:9.18.24-0ubuntu0.22.04.11:9.18.28-0ubuntu0.22.04.11:9.18.30-0ubuntu0.22.04.1
1:9.18.30-0ubuntu0.22.04.2
bind9
Ubuntu:24.04:LTS
From an advisory covering 2 CVEs
 before 1:9.18.30-0ubuntu0.24.04.2, plus listed versions
1:9.18.18-0ubuntu21:9.18.21-0ubuntu11:9.18.24-0ubuntu31:9.18.24-0ubuntu41:9.18.24-0ubuntu51:9.18.28-0ubuntu0.24.04.11:9.18.30-0ubuntu0.24.04.1
1:9.18.30-0ubuntu0.24.04.2
bind
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 9.20.5-1.1
9.20.5-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-11187 is a high vulnerability (CVSS 7.5) in Isc Bind 9, published January 29, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 16.0%, the 96th percentile. Fixed in bind 9.18.33-r0.

References

Show 88 moreShow less
This page doesn't list everything

Left out here: 465 package rows. The JSON record has them. Left out on purpose, here and in the API, to keep responses small: 8 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open