CVE-2023-6516

🗓️ 13 Feb 2024 14:05:28Reported by iscType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 522 Views

`named` running as a recursive resolver in BIND 9 allows cache database to grow infinitely large, exceeding `max-cache-size` limit

Reporter	Title	Published	Views	Family All 160
IBM Security Bulletins	Security Bulletin: Vulnerabilities in bind and dnsmasq affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	26 Feb 202515:47	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to denial of service due to ISC BIND	5 Jun 202416:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana using third-party Kubernetes Operators is affected by Multiple Security Vulnerabilities	13 Jun 202406:21	–	ibm
IBM Security Bulletins	Security Bulletin: ISC BIND on IBM i is vulnerable to denial of service attacks due to multiple vulnerabilities.	1 Mar 202415:22	–	ibm
Tenable Nessus	Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2024-550)	6 Mar 202400:00	–	nessus
Tenable Nessus	AlmaLinux 8 : bind9.16 (ALSA-2024:1781)	12 Apr 202400:00	–	nessus
Tenable Nessus	AlmaLinux 9 : bind (ALSA-2024:1789)	12 Apr 202400:00	–	nessus
Tenable Nessus	ISC BIND 9.16.0 < 9.16.48 / 9.16.8-S1 < 9.16.48-S1 Vulnerability (cve-2023-6516)	13 Feb 202400:00	–	nessus
Tenable Nessus	Debian dsa-5621 : bind9 - security update	14 Feb 202400:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.11.1 : bind (EulerOS-SA-2024-1712)	29 May 202400:00	–	nessus

NVD

Node

isc bindRange9.16.0–9.16.45-

isc bindMatch9.16.8s1supported_preview

isc bindMatch9.16.11s1supported_preview

isc bindMatch9.16.12s1supported_preview

isc bindMatch9.16.13s1supported_preview

isc bindMatch9.16.14s1supported_preview

isc bindMatch9.16.21s1supported_preview

isc bindMatch9.16.32s1supported_preview

isc bindMatch9.16.36s1supported_preview

isc bindMatch9.16.43s1supported_preview

isc bindMatch9.16.45s1supported_preview

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

[
  {
    "vendor": "ISC",
    "product": "BIND 9",
    "versions": [
      {
        "version": "9.16.0",
        "lessThanOrEqual": "9.16.45",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "9.16.8-S1",
        "lessThanOrEqual": "9.16.45-S1",
        "status": "affected",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20240503-0008/
openwall	www.openwall.com/lists/oss-security/2024/02/13/1
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/
kb	www.kb.isc.org/docs/cve-2023-6516

21 Nov 2024 08:44Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

EPSS0.00225

SSVC