F5-K000150814
First published: Tue Apr 15 2025(Updated: )
It is possible to construct a zone such that some queries to it will generate responses containing numerous records in the Additional section. An attacker sending many such queries can cause either the authoritative server itself or an independent resolver to use disproportionate resources processing the queries. Zones will usually need to have been deliberately crafted to attack this exposure. This issue affects BIND 9 versions 9.11.0 through 9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.32-S1.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| F5 BIG-IP and BIG-IQ Centralized Management | =17.5.0>=17.1.0<=17.1.2 | |
| F5 BIG-IP and BIG-IQ Centralized Management | >=16.1.0<=16.1.5 | |
| F5 BIG-IP and BIG-IQ Centralized Management | >=15.1.0<=15.1.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of F5-K000150814?
The severity of F5-K000150814 is classified as high due to its potential to allow an attacker to exhaust resources.
How do I fix F5-K000150814?
To fix F5-K000150814, update your F5 BIG-IP or BIG-IQ Centralized Management to a patched version that addresses this vulnerability.
What systems are affected by F5-K000150814?
F5-K000150814 affects specific versions of F5 BIG-IP and BIG-IQ Centralized Management software.
What type of attack is associated with F5-K000150814?
F5-K000150814 is associated with a denial of service attack that exploits excessive resource consumption.
Can F5-K000150814 affect both authoritative servers and resolvers?
Yes, F5-K000150814 can affect both the authoritative server and independent resolvers by exhausting their resources.
- collector/f5-advisory
- source/F5
- alias/CVE-2024-11187
- agent/software-canonical-lookup
- agent/references
- agent/last-modified-date
- agent/source
- agent/severity
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- agent/tags
- agent/type
- agent/event
- vendor/f5
- canonical/f5 big-ip and big-iq centralized management
- version/f5 big-ip and big-iq centralized management/17.5.0
- version/f5 big-ip and big-iq centralized management/17.1.0
- version/f5 big-ip and big-iq centralized management/17.1.2
- version/f5 big-ip and big-iq centralized management/16.1.0
- version/f5 big-ip and big-iq centralized management/16.1.5
- version/f5 big-ip and big-iq centralized management/15.1.0
- version/f5 big-ip and big-iq centralized management/15.1.10