]> git.ipfire.org Git - thirdparty/bind9.git/commit
[9.11] [CVE-2024-11187] sec: usr: Limit the additional processing for large RDATA...
authorNicki Křížek <nicki@isc.org>
Mon, 20 Jan 2025 16:17:36 +0000 (16:17 +0000)
committerNicki Křížek <nicki@isc.org>
Mon, 20 Jan 2025 16:17:36 +0000 (16:17 +0000)
commitddef4aa7f01ef632138c5e5dc74dc550c65ce34d
tree1e2402b991ef42c55fbe21e3ca40167032ac170e
parentd989cccce9677d60a1c90f4d2aa1e665d279e61a
parent89b256efae2d7ed61690fc241a661194481c815d
[9.11] [CVE-2024-11187] sec: usr: Limit the additional processing for large RDATA sets

When answering queries, don't add data to the additional section if the answer has more than 13 names in the RDATA. This limits the number of lookups into the database(s) during a single client query, reducing query processing load.

Backport of MR !750

See isc-projects/bind9#5034

Merge branch '5034-security-limit-additional-9.11' into 'bind-9.11-release'

See merge request isc-private/bind9!761