]> git.ipfire.org Git - thirdparty/bind9.git/commit
[CVE-2024-11187] sec: usr: Limit the additional processing for large RDATA sets
authorAndoni Duarte <andoni@isc.org>
Wed, 15 Jan 2025 11:56:06 +0000 (11:56 +0000)
committerAndoni Duarte <andoni@isc.org>
Wed, 15 Jan 2025 11:56:06 +0000 (11:56 +0000)
commit4d054cca7a006edbaafffa0aa2ebe4b47fb8db35
treef41c870c0fc3127d17a9f5d2eaa4816f4810dc2f
parent3a94afa03a17a5f75fb1774a6373d37b9d046831
parenta1982cf1bb95c818aa7b58988b5611dec80f2408
[CVE-2024-11187] sec: usr: Limit the additional processing for large RDATA sets

When answering queries, don't add data to the additional section if the answer has more than 13 names in the RDATA. This limits the number of lookups into the database(s) during a single client query, reducing query processing load.

See isc-projects/bind9#5034

Merge branch '5034-security-limit-additional' into 'v9.21.4-release'

See merge request isc-private/bind9!750