]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
[9.16] [CVE-2024-11187] sec: usr: Limit the additional processing for large RDATA...
authorNicki Křížek <nicki@isc.org>
Mon, 20 Jan 2025 16:17:08 +0000 (16:17 +0000)
committerNicki Křížek <nicki@isc.org>
Mon, 20 Jan 2025 16:17:08 +0000 (16:17 +0000)
When answering queries, don't add data to the additional section if the answer has more than 13 names in the RDATA. This limits the number of lookups into the database(s) during a single client query, reducing query processing load.

Backport of MR !750

See isc-projects/bind9#5034

Merge branch '5034-security-limit-additional-9.16' into 'bind-9.16-release'

See merge request isc-private/bind9!760


Trivial merge