CVE-2023-2911

🗓️ 21 Jun 2023 16:26:36Reported by iscType

BIND 9 resolver may terminate unexpectedly due to stack overflo

Reporter	Title	Published	Views	Family All 84
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony with ISC BIND is vulnerable to a denial of service	26 Mar 202504:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor with ISC BIND is vulnerable to a denial of service	3 Oct 202318:20	–	ibm
Tenable Nessus	Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2023-240)	20 Jul 202300:00	–	nessus
Tenable Nessus	ISC BIND 9.16.33 < 9.16.42 / 9.16.33-S1 < 9.16.42-S1 / 9.18.7 < 9.18.16 / 9.18.11-S1 < 9.18.16-S1 Vulnerability (cve-2023-2911)	21 Jun 202300:00	–	nessus
Tenable Nessus	CentOS 9 : bind-9.16.23-13.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	Debian DSA-5439-1 : bind9 - security update	26 Jun 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : bind (EulerOS-SA-2023-2837)	16 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : bind (EulerOS-SA-2023-2854)	16 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.1 : bind (EulerOS-SA-2023-3051)	16 Jan 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.0 : bind (EulerOS-SA-2023-3068)	16 Jan 202400:00	–	nessus

NVD

Node

isc bindRange9.16.33–9.16.41-

isc bindRange9.16.33–9.16.41supported_preview

isc bindRange9.18.7–9.18.15-

isc bindRange9.18.11–9.18.15supported_preview

Node

debian debian_linuxMatch11.0

debian debian_linuxMatch12.0

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

Node

debian debian_linuxMatch11.0

debian debian_linuxMatch12.0

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h410c_firmwareMatch-

AND

netapp h410cMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

[
  {
    "vendor": "ISC",
    "product": "BIND 9",
    "versions": [
      {
        "version": "9.16.33",
        "lessThanOrEqual": "9.16.41",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "9.18.7",
        "lessThanOrEqual": "9.18.15",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "9.16.33-S1",
        "lessThanOrEqual": "9.16.41-S1",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "9.18.11-S1",
        "lessThanOrEqual": "9.18.15-S1",
        "status": "affected",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
kb	www.kb.isc.org/docs/cve-2023-2911
openwall	www.openwall.com/lists/oss-security/2023/06/21/6
security	www.security.netapp.com/advisory/ntap-20230703-0010/
debian	www.debian.org/security/2023/dsa-5439
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/U3K6AJK7RRSR53HRF5GGKPA6PDUDWOD2/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/SEFCEVCTYEMKTWA7V7EYPI5YQQ4JWDLI/

21 Nov 2024 07:59Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.0013

SSVC

CWE-787

cve-2023-2911 bind 9 resolver stack overflow nvd security vulnerability