SUSE update for bind
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 2 |
| CVE-ID | CVE-2024-1737 CVE-2024-1975 |
| CWE-ID | CWE-399 CWE-400 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
SUSE Linux Enterprise Software Development Kit 12 Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Applications 12 Operating systems & Components / Operating system SUSE Linux Enterprise Server 12 Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing 12 Operating systems & Components / Operating system libisc1107-debuginfo-32bit Operating systems & Components / Operating system package or component libisc1107-32bit Operating systems & Components / Operating system package or component python-bind Operating systems & Components / Operating system package or component bind-doc Operating systems & Components / Operating system package or component libirs161 Operating systems & Components / Operating system package or component libdns1110 Operating systems & Components / Operating system package or component bind-chrootenv Operating systems & Components / Operating system package or component liblwres161-debuginfo Operating systems & Components / Operating system package or component bind-utils Operating systems & Components / Operating system package or component bind Operating systems & Components / Operating system package or component libbind9-161 Operating systems & Components / Operating system package or component libisccfg163 Operating systems & Components / Operating system package or component libdns1110-debuginfo Operating systems & Components / Operating system package or component bind-utils-debuginfo Operating systems & Components / Operating system package or component liblwres161 Operating systems & Components / Operating system package or component libisccfg163-debuginfo Operating systems & Components / Operating system package or component libbind9-161-debuginfo Operating systems & Components / Operating system package or component libisccc161-debuginfo Operating systems & Components / Operating system package or component libisc1107 Operating systems & Components / Operating system package or component libisccc161 Operating systems & Components / Operating system package or component libisc1107-debuginfo Operating systems & Components / Operating system package or component libirs161-debuginfo Operating systems & Components / Operating system package or component bind-debuginfo Operating systems & Components / Operating system package or component bind-debugsource Operating systems & Components / Operating system package or component bind-devel Operating systems & Components / Operating system package or component |
| Vendor | SUSE |
Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
1) Resource management error
EUVDB-ID: #VU94710
Risk: Medium
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2024-1737
CWE-ID:
CWE-399 - Resource Management Errors
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to improper management of internal resources within the application when handling a very large number of RRs. Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name.
MitigationUpdate the affected package bind to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Software Development Kit 12: SP5
SUSE Linux Enterprise Server for SAP Applications 12: SP5
SUSE Linux Enterprise Server 12: SP5
SUSE Linux Enterprise High Performance Computing 12: SP5
libisc1107-debuginfo-32bit: before 9.11.22-3.57.1
libisc1107-32bit: before 9.11.22-3.57.1
python-bind: before 9.11.22-3.57.1
bind-doc: before 9.11.22-3.57.1
libirs161: before 9.11.22-3.57.1
libdns1110: before 9.11.22-3.57.1
bind-chrootenv: before 9.11.22-3.57.1
liblwres161-debuginfo: before 9.11.22-3.57.1
bind-utils: before 9.11.22-3.57.1
bind: before 9.11.22-3.57.1
libbind9-161: before 9.11.22-3.57.1
libisccfg163: before 9.11.22-3.57.1
libdns1110-debuginfo: before 9.11.22-3.57.1
bind-utils-debuginfo: before 9.11.22-3.57.1
liblwres161: before 9.11.22-3.57.1
libisccfg163-debuginfo: before 9.11.22-3.57.1
libbind9-161-debuginfo: before 9.11.22-3.57.1
libisccc161-debuginfo: before 9.11.22-3.57.1
libisc1107: before 9.11.22-3.57.1
libisccc161: before 9.11.22-3.57.1
libisc1107-debuginfo: before 9.11.22-3.57.1
libirs161-debuginfo: before 9.11.22-3.57.1
bind-debuginfo: before 9.11.22-3.57.1
bind-debugsource: before 9.11.22-3.57.1
bind-devel: before 9.11.22-3.57.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_software_development_kit_12:SP5:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_12:SP5:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_12:SP5:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_12:SP5:*:*:*:*:*:*:*
- cpe:2.3:a:suse:libisc1107-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libisc1107-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python-bind:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind-doc:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libirs161:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libdns1110:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind-chrootenv:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:liblwres161-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind-utils:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libbind9-161:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libisccfg163:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libdns1110-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind-utils-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:liblwres161:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libisccfg163-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libbind9-161-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libisccc161-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libisc1107:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libisccc161:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libisc1107-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libirs161-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind-devel:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2024/suse-su-20242868-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Resource exhaustion
EUVDB-ID: #VU94711
Risk: Medium
CVSSv4.0: 6.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2024-1975
CWE-ID:
CWE-400 - Resource exhaustion
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to application does not properly control consumption of internal resources. If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of SIG(0) signed requests.
MitigationUpdate the affected package bind to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Software Development Kit 12: SP5
SUSE Linux Enterprise Server for SAP Applications 12: SP5
SUSE Linux Enterprise Server 12: SP5
SUSE Linux Enterprise High Performance Computing 12: SP5
libisc1107-debuginfo-32bit: before 9.11.22-3.57.1
libisc1107-32bit: before 9.11.22-3.57.1
python-bind: before 9.11.22-3.57.1
bind-doc: before 9.11.22-3.57.1
libirs161: before 9.11.22-3.57.1
libdns1110: before 9.11.22-3.57.1
bind-chrootenv: before 9.11.22-3.57.1
liblwres161-debuginfo: before 9.11.22-3.57.1
bind-utils: before 9.11.22-3.57.1
bind: before 9.11.22-3.57.1
libbind9-161: before 9.11.22-3.57.1
libisccfg163: before 9.11.22-3.57.1
libdns1110-debuginfo: before 9.11.22-3.57.1
bind-utils-debuginfo: before 9.11.22-3.57.1
liblwres161: before 9.11.22-3.57.1
libisccfg163-debuginfo: before 9.11.22-3.57.1
libbind9-161-debuginfo: before 9.11.22-3.57.1
libisccc161-debuginfo: before 9.11.22-3.57.1
libisc1107: before 9.11.22-3.57.1
libisccc161: before 9.11.22-3.57.1
libisc1107-debuginfo: before 9.11.22-3.57.1
libirs161-debuginfo: before 9.11.22-3.57.1
bind-debuginfo: before 9.11.22-3.57.1
bind-debugsource: before 9.11.22-3.57.1
bind-devel: before 9.11.22-3.57.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_software_development_kit_12:SP5:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_12:SP5:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_12:SP5:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_12:SP5:*:*:*:*:*:*:*
- cpe:2.3:a:suse:libisc1107-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libisc1107-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:python-bind:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind-doc:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libirs161:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libdns1110:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind-chrootenv:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:liblwres161-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind-utils:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libbind9-161:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libisccfg163:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libdns1110-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind-utils-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:liblwres161:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libisccfg163-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libbind9-161-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libisccc161-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libisc1107:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libisccc161:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libisc1107-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:libirs161-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:bind-devel:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2024/suse-su-20242868-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
