Lucene search
K

11946 matches found

RedhatCVE
RedhatCVE
added 2023/09/20 3:56 p.m.35 views

CVE-2023-3341

A flaw was found in the Bind package. The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size. Depending on the environment, this may cause the packet-parsing code...

7.5CVSS7AI score0.02626EPSS
Exploits0References3
NVD
NVD
added 2023/09/20 1:15 p.m.26 views

CVE-2023-4236

A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load. This issue affects BIND 9 versions 9.18.0 through 9.18.18...

7.5CVSS7.5AI score0.0215EPSS
Exploits0References7
OSV
OSV
added 2023/09/20 1:15 p.m.1 views

DEBIAN-CVE-2023-4236

A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load. This issue affects BIND 9 versions 9.18.0 through 9.18.18...

7.5CVSS7.9AI score0.0215EPSS
Exploits0References1
OSV
OSV
added 2023/09/20 1:15 p.m.27 views

CVE-2023-4236

A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load. This issue affects BIND 9 versions 9.18.0 through 9.18.18...

7.5CVSS7.1AI score0.0215EPSS
Exploits0References7
OSV
OSV
added 2023/09/20 1:15 p.m.1 views

ALPINE-CVE-2023-4236

A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load. This issue affects BIND 9 versions 9.18.0 through 9.18.18...

7.5CVSS7AI score0.0215EPSS
Exploits0References1
NVD
NVD
added 2023/09/20 1:15 p.m.29 views

CVE-2023-3341

The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...

7.5CVSS7.7AI score0.02626EPSS
Exploits0References8
OSV
OSV
added 2023/09/20 1:15 p.m.0 views

AZL-29943 CVE-2023-3341 affecting package bind for versions less than 9.16.44-1

The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...

7.5CVSS6.7AI score0.02626EPSS
Exploits0References1
OSV
OSV
added 2023/09/20 1:15 p.m.36 views

CVE-2023-3341

The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...

7.5CVSS7.2AI score0.02626EPSS
Exploits0References8
OSV
OSV
added 2023/09/20 1:15 p.m.1 views

DEBIAN-CVE-2023-3341

The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...

7.5CVSS6.7AI score0.02626EPSS
Exploits0References1
OSV
OSV
added 2023/09/20 1:15 p.m.3 views

AZL-34562 CVE-2023-3341 affecting package bind for versions less than 9.16.44-1

The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...

7.5CVSS6.7AI score0.02626EPSS
Exploits0References1
Prion
Prion
added 2023/09/20 1:15 p.m.176 views

Code injection

The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...

5CVSS7.6AI score0.02626EPSS
Exploits0References8Affected Software3
Prion
Prion
added 2023/09/20 1:15 p.m.85 views

Design/Logic Flaw

A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load. This issue affects BIND 9 versions 9.18.0 through 9.18.18...

5CVSS7.3AI score0.0215EPSS
Exploits0References7Affected Software3
CVE
CVE
added 2023/09/20 12:32 p.m.208 views

CVE-2023-4236

CVE-2023-4236 affects BIND 9 to include versions 9.18.0–9.18.18 and 9.18.11-S1–9.18.18-S1. The issue is a flaw in the DNS-over-TLS networking code that can cause an assertion failure, leading to an unexpected termination of named under heavy DNS-over-TLS query load. The practical consequence is a...

7.5CVSS7.5AI score0.0215EPSS
Exploits0References7Affected Software1
Debian CVE
Debian CVE
added 2023/09/20 12:32 p.m.39 views

CVE-2023-4236

A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load. This issue affects BIND 9 versions 9.18.0 through 9.18.18...

7.5CVSS7.6AI score0.0215EPSS
Exploits0
Cvelist
Cvelist
added 2023/09/20 12:32 p.m.22 views

CVE-2023-4236 named may terminate unexpectedly under high DNS-over-TLS query load

A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load. This issue affects BIND 9 versions 9.18.0 through 9.18.18...

7.5CVSS7.7AI score0.0215EPSS
Exploits0References7
AlpineLinux
AlpineLinux
added 2023/09/20 12:32 p.m.45 views

CVE-2023-4236

A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load. This issue affects BIND 9 versions 9.18.0 through 9.18.18...

7.5CVSS7.6AI score0.0215EPSS
Exploits0
CVE
CVE
added 2023/09/20 12:32 p.m.838 views

CVE-2023-3341

CVE-2023-3341 describes a stack-exhaustion DoS in ISC BIND’s control channel; recursive parsing of control channel messages can overflow stack, causing named to terminate. Affected are BIND/NAMED versions across multiple series (e.g., 9.2.0–9.16.43, 9.18.0–9.18.18, 9.19.0–9.19.16, plus S1 variant...

7.5CVSS7.9AI score0.02626EPSS
Exploits0References8Affected Software1
Cvelist
Cvelist
added 2023/09/20 12:32 p.m.32 views

CVE-2023-3341 A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly

The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...

7.5CVSS7.9AI score0.02626EPSS
Exploits0References8
Debian CVE
Debian CVE
added 2023/09/20 12:32 p.m.41 views

CVE-2023-3341

The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...

7.5CVSS6.7AI score0.02626EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2023/09/20 12:32 p.m.50 views

CVE-2023-3341

The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory,...

7.5CVSS8AI score0.02626EPSS
Exploits0
Rows per page
Query Builder