]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
[CVE-2024-11187] sec: usr: Limit the additional processing for large RDATA sets
authorAndoni Duarte <andoni@isc.org>
Wed, 15 Jan 2025 11:56:06 +0000 (11:56 +0000)
committerAndoni Duarte <andoni@isc.org>
Wed, 15 Jan 2025 11:56:06 +0000 (11:56 +0000)
When answering queries, don't add data to the additional section if the answer has more than 13 names in the RDATA. This limits the number of lookups into the database(s) during a single client query, reducing query processing load.

See isc-projects/bind9#5034

Merge branch '5034-security-limit-additional' into 'v9.21.4-release'

See merge request isc-private/bind9!750


Trivial merge