The vulnerability of the DNS BIND server arises from buffer overflows in the stack when BIND operates as a resolver. This allows attackers to cause a service failure.

🗓️ 26 Jun 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

BIND DNS resolver stack overflow lets remote attackers cause service failure via recursive requests and cached responses.

Reporter	Title	Published	Views	Family All 85
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony with ISC BIND is vulnerable to a denial of service	26 Mar 202504:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor with ISC BIND is vulnerable to a denial of service	3 Oct 202318:20	–	ibm
Tenable Nessus	Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2023-240)	20 Jul 202300:00	–	nessus
Tenable Nessus	ISC BIND 9.16.33 < 9.16.42 / 9.16.33-S1 < 9.16.42-S1 / 9.18.7 < 9.18.16 / 9.18.11-S1 < 9.18.16-S1 Vulnerability (cve-2023-2911)	21 Jun 202300:00	–	nessus
Tenable Nessus	CentOS 9 : bind-9.16.23-13.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	Debian DSA-5439-1 : bind9 - security update	26 Jun 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : bind (EulerOS-SA-2023-2837)	16 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : bind (EulerOS-SA-2023-2854)	16 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.1 : bind (EulerOS-SA-2023-3051)	16 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.0 : bind (EulerOS-SA-2023-3068)	16 Jan 202400:00	–	nessus

Vulners

Node

internet_systems_consortium bindRange9.16.33–9.16.41

OR

internet_systems_consortium bindRange9.18.7–9.18.15

OR

internet_systems_consortium bindRange9.16.33-s1–9.16.41-s1

OR

internet_systems_consortium bindRange9.18.11-s1–9.18.15-s1

Source	Link
vuldb	www.vuldb.com/
openwall	www.openwall.com/lists/oss-security/2023/06/21/6
kb	www.kb.isc.org/docs/cve-2023-2911
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.8/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

06 Mar 2024 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 37.5

CVSS 27.8

EPSS0.0013

domain name system dns server resolver overflow stack overflow recursive requests cached responses remote attacker service disruption