CVE-2023-4408

The CVE-2023-4408 issue is a vulnerability in the DNS message parsing of BIND's named where the parsing path has an overly high computational complexity. A crafted large or malformed DNS message can cause high CPU usage on affected BIND 9 releases, potentially impacting both authoritative servers...

CVE-2023-5679

CVE-2023-5679 : A bad interaction between DNS64 and serve-stale in ISC BIND can cause named to crash with an assertion failure during recursive resolution when both features are enabled. Affected products/versions include BIND 9.16.x (notably up to 9.16.45) and 9.18.x/9.19.x series with correspon...

CVE-2023-5517

CVE-2023-5517 is a BIND vulnerability where a flaw in query-handling can cause named to exit with an assertion failure when nxdomain-redirect is configured and a PTR query for an RFC 1918 address would yield NXDOMAIN. Affected: BIND 9.x (various 9.12.0–9.19.19 and related 9.16/9.18 ranges; versio...