CVE-2023-2911

If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow.
This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
Affected Products (NVD)
VendorProductVersion
iscbind
9.16.33 ≤
𝑥
≤ 9.16.41
iscbind
9.16.33 ≤
𝑥
≤ 9.16.41
iscbind
9.18.7 ≤
𝑥
≤ 9.18.15
iscbind
9.18.11 ≤
𝑥
≤ 9.18.15
debiandebian_linux
11.0
debiandebian_linux
12.0
debiandebian_linux
11.0
debiandebian_linux
12.0
netappactive_iq_unified_manager
-
netapph700s_firmware
-
netapph300s_firmware
-
netapph410c_firmware
-
netapph410s_firmware
-
netapph500s_firmware
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
bind9
bookworm
1:9.18.28-1~deb12u2
fixed
bookworm (security)
1:9.18.28-1~deb12u2
fixed
bullseye
1:9.16.50-1~deb11u2
fixed
bullseye (security)
1:9.16.50-1~deb11u1
fixed
buster
not-affected
sid
1:9.20.4-3
fixed
trixie
1:9.20.4-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
bind9
bionic
not-affected
focal
Fixed 1:9.16.1-0ubuntu2.15
released
jammy
Fixed 1:9.18.12-0ubuntu0.22.04.2
released
kinetic
Fixed 1:9.18.12-0ubuntu0.22.10.2
released
lunar
Fixed 1:9.18.12-1ubuntu1.1
released
mantic
Fixed 1:9.18.12-1ubuntu2
released
noble
Fixed 1:9.18.12-1ubuntu2
released
oracular
Fixed 1:9.18.12-1ubuntu2
released
trusty
not-affected
xenial
not-affected
bind9-libs
bionic
dne
focal
not-affected
jammy
not-affected
mantic
dne
noble
dne
oracular
dne
trusty
dne
xenial
dne
isc-dhcp
bionic
needs-triage
focal
not-affected
jammy
not-affected
kinetic
ignored
lunar
ignored
mantic
not-affected
noble
not-affected
oracular
not-affected
trusty
not-affected
xenial
not-affected
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
bind
suse enterprise sap 15 SP4
9.16.42-150400.5.27.1
fixed
suse enterprise sap 15 SP5
9.16.42-150500.8.3.1
fixed
suse enterprise sap 15 SP7
9.20.3-150700.1.6
fixed
suse enterprise server 15 SP4
9.16.42-150400.5.27.1
fixed
suse enterprise server 15 SP5
9.16.42-150500.8.3.1
fixed
suse enterprise server 15 SP7
9.20.3-150700.1.6
fixed
bind-doc
suse enterprise sap 15 SP4
9.16.42-150400.5.27.1
fixed
suse enterprise sap 15 SP5
9.16.42-150500.8.3.1
fixed
suse enterprise sap 15 SP7
9.20.3-150700.1.6
fixed
suse enterprise server 15 SP4
9.16.42-150400.5.27.1
fixed
suse enterprise server 15 SP5
9.16.42-150500.8.3.1
fixed
suse enterprise server 15 SP7
9.20.3-150700.1.6
fixed
bind-utils
suse enterprise desktop 15 SP4
9.16.42-150400.5.27.1
fixed
suse enterprise desktop 15 SP5
9.16.42-150500.8.3.1
fixed
suse enterprise sap 15 SP4
9.16.42-150400.5.27.1
fixed
suse enterprise sap 15 SP5
9.16.42-150500.8.3.1
fixed
suse enterprise server 15 SP4
9.16.42-150400.5.27.1
fixed
suse enterprise server 15 SP5
9.16.42-150500.8.3.1
fixed
python3-bind
suse enterprise desktop 15 SP4
9.16.42-150400.5.27.1
fixed
suse enterprise desktop 15 SP5
9.16.42-150500.8.3.1
fixed
suse enterprise sap 15 SP4
9.16.42-150400.5.27.1
fixed
suse enterprise sap 15 SP5
9.16.42-150500.8.3.1
fixed
suse enterprise server 15 SP4
9.16.42-150400.5.27.1
fixed
suse enterprise server 15 SP5
9.16.42-150500.8.3.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
bind
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-chroot
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-debuginfo
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-debugsource
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-devel
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-dlz-filesystem
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-dlz-filesystem-debuginfo
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-dlz-ldap
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-dlz-ldap-debuginfo
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-dlz-mysql
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-dlz-mysql-debuginfo
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-dlz-sqlite3
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-dlz-sqlite3-debuginfo
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-dnssec-doc
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-dnssec-utils
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-dnssec-utils-debuginfo
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-doc
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-libs
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-libs-debuginfo
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-license
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-pkcs11
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-pkcs11-debuginfo
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-pkcs11-devel
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-pkcs11-libs
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-pkcs11-libs-debuginfo
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-pkcs11-utils
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-pkcs11-utils-debuginfo
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-utils
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
bind-utils-debuginfo
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
python3-bind
Amazon Linux 2023
32:9.16.42-1.amzn2023.0.1
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
bind
CBL-Mariner 2.0
0:9.16.44-1.cm2
fixed
Common Weakness Enumeration
References
http://www.openwall.com/lists/oss-security/2023/06/21/6
https://kb.isc.org/docs/cve-2023-2911
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SEFCEVCTYEMKTWA7V7EYPI5YQQ4JWDLI/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3K6AJK7RRSR53HRF5GGKPA6PDUDWOD2/
https://security.netapp.com/advisory/ntap-20230703-0010/
https://www.debian.org/security/2023/dsa-5439
http://www.openwall.com/lists/oss-security/2023/06/21/6
https://kb.isc.org/docs/cve-2023-2911
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SEFCEVCTYEMKTWA7V7EYPI5YQQ4JWDLI/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3K6AJK7RRSR53HRF5GGKPA6PDUDWOD2/
https://security.netapp.com/advisory/ntap-20230703-0010/
https://www.debian.org/security/2023/dsa-5439