HTTP2: ISC Bind DNS-over-HTTPS Implementation Denial Of Service Vulnerability
This signature detects attempts to exploit a known vulnerability against ISC Bind. A successful attack can result in a denial-of-service condition.
Extended Description
Clients using DNS-over-HTTPS (DoH) can exhaust a DNS resolver's CPU and/or memory by flooding it with crafted valid or invalid HTTP/2 traffic.\nThis issue affects BIND 9 versions 9.18.0 through 9.18.32, 9.20.0 through 9.20.4, 9.21.0 through 9.21.3, and 9.18.11-S1 through 9.18.32-S1.
References
CVE: CVE-2024-12705
Short Name
HTTP2:ISC-BIND-DNS-DOS
Severity
Major
Recommended
False
Recommended Action
None
Category
HTTP2
Keywords
Bind CVE-2024-12705 DNS-over-HTTPS Denial ISC Implementation Of Service Vulnerability
Release Date
06/23/2025
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
Sigpack Version
3819
False Positive
Unknown