CVE-2023-5680

2024-02-1314:15:45

Google

osv.dev

cve-2023-5680

bind 9

resolver cache

performance issue

ecs records

6.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.6%

JSON

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance.
This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

CPENameOperatorVersion
bindeq9.14.8-r1
bindeq9.9.2_p2-r1
bindeq9.7.2_p3-r1
bindeq9.8.0_p1-r1
bindeq9.16.18-r1
bindeq9.10.3_p4-r1
bindeq9.18.4-r1
bindeq9.18.17-r1
bindeq9.9.0-r1
bindeq9.10.3_p2-r1

Name	Operator	Version
bind	eq	9.14.8-r1
bind	eq	9.9.2_p2-r1
bind	eq	9.7.2_p3-r1
bind	eq	9.8.0_p1-r1
bind	eq	9.16.18-r1
bind	eq	9.10.3_p4-r1
bind	eq	9.18.4-r1
bind	eq	9.18.17-r1
bind	eq	9.9.0-r1
bind	eq	9.10.3_p2-r1