]> git.ipfire.org Git - thirdparty/bind9.git/commit
[9.16] [CVE-2024-11187] sec: usr: Limit the additional processing for large RDATA...
authorNicki Křížek <nicki@isc.org>
Mon, 20 Jan 2025 16:17:08 +0000 (16:17 +0000)
committerNicki Křížek <nicki@isc.org>
Mon, 20 Jan 2025 16:17:08 +0000 (16:17 +0000)
commit4aa5ace95d1742f856ef2e9e5b590127d17a6fdb
treeb01852d4ce51bb2290c068ef8d4ffde87aa956d4
parent4f876e711102efad23f7ca6f7b56a34d80049076
parent9dc22c65e813c3e16781fb34a5199c6124938c1b
[9.16] [CVE-2024-11187] sec: usr: Limit the additional processing for large RDATA sets

When answering queries, don't add data to the additional section if the answer has more than 13 names in the RDATA. This limits the number of lookups into the database(s) during a single client query, reducing query processing load.

Backport of MR !750

See isc-projects/bind9#5034

Merge branch '5034-security-limit-additional-9.16' into 'bind-9.16-release'

See merge request isc-private/bind9!760