CVE-2023-2911
21.06.2023, 17:15
If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow. This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.Enginsight
| Vendor | Product | Version |
|---|---|---|
| isc | bind | 9.16.33 ≤ 𝑥 ≤ 9.16.41 |
| isc | bind | 9.16.33 ≤ 𝑥 ≤ 9.16.41 |
| isc | bind | 9.18.7 ≤ 𝑥 ≤ 9.18.15 |
| isc | bind | 9.18.11 ≤ 𝑥 ≤ 9.18.15 |
| debian | debian_linux | 11.0 |
| debian | debian_linux | 12.0 |
| debian | debian_linux | 11.0 |
| debian | debian_linux | 12.0 |
| netapp | active_iq_unified_manager | - |
| netapp | h700s_firmware | - |
| netapp | h300s_firmware | - |
| netapp | h410c_firmware | - |
| netapp | h410s_firmware | - |
| netapp | h500s_firmware | - |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| bind9 |
| ||||||||||||||||||||
| bind9-libs |
| ||||||||||||||||||||
| isc-dhcp |
|
Common Weakness Enumeration
References