Debian Security Bug TrackerDEBIANCVE:CVE-2023-4408

HistoryFeb 13, 2024 - 2:15 p.m.

CVE-2023-4408

2024-02-1314:15:45

Debian Security Bug Tracker

security-tracker.debian.org

dns message parsing

computational complexity

excessive cpu load

bind 9

vulnerability

crafted queries

crafted responses

authoritative servers

recursive resolvers

0.001 Low

EPSS

Percentile

41.8%

JSON

The DNS message parsing code in named includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected named instance by exploiting this flaw. This issue affects both authoritative servers and recursive resolvers. This issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

OSVersionArchitecturePackageVersionFilename
Debian12allbind9< 1:9.18.24-1bind9_1:9.18.24-1_all.deb
Debian11allbind9< 1:9.16.48-1bind9_1:9.16.48-1_all.deb
Debian10allbind9<= 1:9.11.5.P4+dfsg-5.1+deb10u7bind9_1:9.11.5.P4+dfsg-5.1+deb10u7_all.deb
Debian999allbind9< 1:9.19.21-1bind9_1:9.19.21-1_all.deb
Debian13allbind9< 1:9.19.21-1bind9_1:9.19.21-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	bind9	< 1:9.18.24-1	bind9_1:9.18.24-1_all.deb
Debian	11	all	bind9	< 1:9.16.48-1	bind9_1:9.16.48-1_all.deb
Debian	10	all	bind9	<= 1:9.11.5.P4+dfsg-5.1+deb10u7	bind9_1:9.11.5.P4+dfsg-5.1+deb10u7_all.deb
Debian	999	all	bind9	< 1:9.19.21-1	bind9_1:9.19.21-1_all.deb
Debian	13	all	bind9	< 1:9.19.21-1	bind9_1:9.19.21-1_all.deb

0.001 Low

EPSS

Percentile

41.8%

JSON

Related for DEBIANCVE:CVE-2023-4408