AZL-56105
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-56105.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-56105
- Upstream
- Published
- 2025-01-29T22:15:28Z
- Modified
- 2026-04-01T05:18:48.191562Z
- Summary
- CVE-2024-12705 affecting package bind for versions less than 9.20.5-1
- Details
-
Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic. This issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.
- References