CVE-2024-12705

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-12705
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-12705.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-12705
Downstream
ALPINE (1)
ALSA (1)
AZL (1)
BELL (1)
CGA (2)
DEBIAN (1)
MGASA (1)
OESA (2)
openSUSE (1)
RHSA (1)
RLSA (1)
SUSE (2)
UBUNTU (1)
Related
ALSA (1)
CGA (1)
openSUSE (1)
SUSE (2)
Published
2025-01-29T22:15:28Z
Modified
2026-04-16T04:40:08Z
Summary
[none]
Details

Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.

References

Affected packages