]> git.ipfire.org Git - thirdparty/bind9.git/commit
[9.20] [CVE-2024-11187] sec: usr: Limit the additional processing for large RDATA...
authorAndoni Duarte <andoni@isc.org>
Wed, 15 Jan 2025 13:08:50 +0000 (13:08 +0000)
committerAndoni Duarte <andoni@isc.org>
Wed, 15 Jan 2025 13:08:50 +0000 (13:08 +0000)
commit4d3d17c344f8b26ae6a313773aff07ab79c30bda
treef80c2f96cd98ae673ea36c555b531d2ab487b15f
parent993cb7614891f034a44def009779631f7a7af838
parent1b531c17a549fea1da3aeb6238cd60067b225c83
[9.20] [CVE-2024-11187] sec: usr: Limit the additional processing for large RDATA sets

When answering queries, don't add data to the additional section if the answer has more than 13 names in the RDATA. This limits the number of lookups into the database(s) during a single client query, reducing query processing load.

Backport of MR !750

See isc-projects/bind9#5034

Merge branch '5034-security-limit-additional-9.20' into 'v9.20.5-release'

See merge request isc-private/bind9!758