Alpine: multiple bind packages: security update to 9.18.31-r0

high Tenable Self-Hosted Container Security Plugin ID 425660

Description

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

- A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable
while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not
mitigate the attack. This issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0 through 9.19.24,
and 9.18.11-S1 through 9.18.27-S1. (CVE-2024-0760)

- Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same
hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and
also when handling client queries for this name. This issue affects BIND 9 versions 9.11.0 through
9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.4-S1 through
9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1. (CVE-2024-1737)

- If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY"
Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by
sending a stream of SIG(0) signed requests. This issue affects BIND 9 versions 9.0.0 through 9.11.37,
9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.9.3-S1 through 9.11.37-S1,
9.16.8-S1 through 9.16.49-S1, and 9.18.11-S1 through 9.18.27-S1. (CVE-2024-1975)

- Client queries that trigger serving stale data and that also require lookups in local authoritative zone
data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50,
9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1 through
9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1. (CVE-2024-4076)

Plugin Details

Severity: High

ID: 425660

Version: Revision 1.7

Type: Local

Family: Alpine Linux Local Security Checks

Published: 4/15/2025

Updated: 7/2/2026

Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.71

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2024-1975

CVSS v3

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS Score Source: CVE-2024-4076

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 7/23/2024

Reference Information

CVE: CVE-2024-0760, CVE-2024-1737, CVE-2024-1975, CVE-2024-4076

IAVA: 2024-A-0442-S

Detections

Analytics