]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
[9.18] [CVE-2024-11187] sec: usr: Limit the additional processing for large RDATA...
authorAndoni Duarte <andoni@isc.org>
Wed, 15 Jan 2025 13:27:08 +0000 (13:27 +0000)
committerAndoni Duarte <andoni@isc.org>
Wed, 15 Jan 2025 13:27:08 +0000 (13:27 +0000)
When answering queries, don't add data to the additional section if the answer has more than 13 names in the RDATA. This limits the number of lookups into the database(s) during a single client query, reducing query processing load.

Backport of MR !750

See isc-projects/bind9#5034

Merge branch '5034-security-limit-additional-9.18' into 'v9.18.33-release'

See merge request isc-private/bind9!759


Trivial merge