Re: Questions about CVE-2024-11187

2025-03-04 Thread Laszlo Szollosi
Hi Petr, Thank you for the quick response. Yes, I said it before, the utilization stayed high. :) I checked it now and I can see increased network traffic, memory and disk utilization for the same time period. Kind Regards, Laszlo On Tue, 4 Mar 2025 at 09:14, Petr Špaček wrote: > On 04. 03. 25

Re: Questions about CVE-2024-11187

2025-03-04 Thread Petr Špaček
On 04. 03. 25 9:53, Laszlo Szollosi wrote: Many thanks for your response. By mitigation, I mean we have seen an increase in resource utilization, but it would have been much worse without the 'minimal-responses' setting (reduced impact). By prevention, I mean we would not have had the impact a

Re: Questions about CVE-2024-11187

2025-03-04 Thread Laszlo Szollosi
Hi Petr, Many thanks for your response. By mitigation, I mean we have seen an increase in resource utilization, but it would have been much worse without the 'minimal-responses' setting (reduced impact). By prevention, I mean we would not have had the impact at all. By a spike, I mean the CPU util

Re: Questions about CVE-2024-11187

2025-03-03 Thread Petr Špaček
On 28. 02. 25 14:23, Laszlo Szollosi wrote: I'm hoping I can get some insight about the vulnerability mentioned above. We had been running BIND 9.20.4 in our infrastructure, and upgraded to 9.20.6 just recently. CVE-2024-12705 does not apply to our setup, yet we have a suspicion that we were im

Questions about CVE-2024-11187

2025-02-28 Thread Laszlo Szollosi
Hi Everyone, I'm hoping I can get some insight about the vulnerability mentioned above. We had been running BIND 9.20.4 in our infrastructure, and upgraded to 9.20.6 just recently. CVE-2024-12705 does not apply to our setup, yet we have a suspicion that we were impacted by CVE-2024-11187, but cann