CVE-2023-2911

🗓️ 21 Jun 2023 17:47:15Reported by iscType

BIND 9 resolver may terminate unexpectedly due to stack overflo

Reporter	Title	Published	Views	Family All 67
Cvelist	CVE-2023-2911 Exceeding the recursive-clients quota may cause named to terminate unexpectedly when stale-answer-client-timeout is set to 0	21 Jun 202316:26	–	cvelist
OpenVAS	ISC BIND DoS Vulnerability (CVE-2023-2911) - Linux	22 Jun 202300:00	–	openvas
OpenVAS	ISC BIND DoS Vulnerability (CVE-2023-2911) - Windows	22 Jun 202300:00	–	openvas
OpenVAS	Slackware: Security Advisory (SSA:2023-172-01)	22 Jun 202300:00	–	openvas
OpenVAS	Fedora: Security Advisory for bind (FEDORA-2023-8e1ddb1fa2)	25 Jun 202300:00	–	openvas
OpenVAS	Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2023-3051)	31 Oct 202300:00	–	openvas
OpenVAS	Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2023-3068)	31 Oct 202300:00	–	openvas
OpenVAS	Fedora: Security Advisory for bind (FEDORA-2023-1d526d551c)	1 Jul 202300:00	–	openvas
OpenVAS	Debian: Security Advisory (DSA-5439-1)	26 Jun 202300:00	–	openvas
OpenVAS	Fedora: Security Advisory for bind-dyndb-ldap (FEDORA-2023-1d526d551c)	1 Jul 202300:00	–	openvas

Nvd

Node

isc bindRange9.16.33–9.16.41-

isc bindRange9.16.33–9.16.41supported_preview

isc bindRange9.18.7–9.18.15-

isc bindRange9.18.11–9.18.15supported_preview

Node

debian debian_linuxMatch11.0

debian debian_linuxMatch12.0

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

Node

debian debian_linuxMatch11.0

debian debian_linuxMatch12.0

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h410c_firmwareMatch-

AND

netapp h410cMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

[
  {
    "vendor": "ISC",
    "product": "BIND 9",
    "versions": [
      {
        "version": "9.16.33",
        "lessThanOrEqual": "9.16.41",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "9.18.7",
        "lessThanOrEqual": "9.18.15",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "9.16.33-S1",
        "lessThanOrEqual": "9.16.41-S1",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "9.18.11-S1",
        "lessThanOrEqual": "9.18.15-S1",
        "status": "affected",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2023/06/21/6
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/SEFCEVCTYEMKTWA7V7EYPI5YQQ4JWDLI/
debian	www.debian.org/security/2023/dsa-5439
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/U3K6AJK7RRSR53HRF5GGKPA6PDUDWOD2/
kb	www.kb.isc.org/docs/cve-2023-2911
security	www.security.netapp.com/advisory/ntap-20230703-0010/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Jun 2023 17:15Current

7.5High risk

Vulners AI Score7.5

CVSS37.5

EPSS0.002

CWE-787

cve-2023-2911 bind 9 resolver stack overflow nvd security vulnerability