Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-2911

If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow. This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.

Published

2023-06-21T17:15:47.827

Last Modified

2024-11-21T07:59:33.147

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Primary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application isc bind ≤ 9.16.41 Yes
Application isc bind ≤ 9.16.41 Yes
Application isc bind ≤ 9.18.15 Yes
Application isc bind ≤ 9.18.15 Yes
Operating System debian debian_linux 11.0 Yes
Operating System debian debian_linux 12.0 Yes
Operating System fedoraproject fedora 37 Yes
Operating System fedoraproject fedora 38 Yes
Operating System debian debian_linux 11.0 Yes
Operating System debian debian_linux 12.0 Yes
Application netapp active_iq_unified_manager - Yes
Operating System netapp h700s_firmware - Yes
Hardware netapp h700s - No
Operating System netapp h300s_firmware - Yes
Hardware netapp h300s - No
Operating System netapp h410c_firmware - Yes
Hardware netapp h410c - No
Operating System netapp h410s_firmware - Yes
Hardware netapp h410s - No
Operating System netapp h500s_firmware - Yes
Hardware netapp h500s - No
References