bind9 too many records CVE-2024-1737

https://kb.isc.org/docs/cve-2024-1737

error adding 'foo.example.com/A' in './IN' (cache): too many records (must not exceed 100)

foo.example.com のAレコードが100以上登録されている場合にエラー

https://kb.isc.org/docs/rrset-limits-in-zones

max-records-per-type 200;

で制限を緩和

https://jprs.jp/tech/security/2024-07-24-bind9-vuln-resourcerecords.html

It is possible to craft excessively large resource records sets, which have the effect of slowing down database processing. This has been addressed by adding a configurable limit to the number of records that can be stored per name and type in a cache or zone database. The default is 100, which can be tuned with the new max-records-per-type option. [GL #497] [GL #3405]

https://downloads.isc.org/isc/bind9/9.18.28/doc/arm/html/notes.html#security-fixes

https://lists.debian.org/debian-security/2024/07/msg00003.html