CVE-2023-3341 A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly

🗓️ 20 Sep 2023 12:32:03Reported by iscType

vulnrichment🔗 github.com👁 3 Views

Control channel parsing flaw may exhaust the stack, causing named termination.

Reporter	Title	Published	Views	Family All 279
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony provides upgraded software packages to address known CVEs	31 Jan 202402:01	–	ibm
IBM Security Bulletins	Security Bulletin: ISC BIND on IBM i is vulnerable to denial of service due to a stack exhaustion flaw (CVE-2023-3341)	20 Oct 202320:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor provides upgraded software packages to address known CVEs	31 Jan 202402:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps	26 Mar 202504:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony with ISC BIND is vulnerable to a denial of service	13 Feb 202419:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities	16 Nov 202318:47	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in BIND affects IBM Integrated Analytics System [CVE-2023-3341]	26 Apr 202411:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak	26 Mar 202504:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Conductor with ISC BIND is vulnerable to a denial of service	13 Feb 202419:20	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to denial of service due to ISC BIND (CVE-2023-3341)	18 Dec 202316:26	–	ibm

Source	Link
debian	www.debian.org/security/2023/dsa-5504
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/IPJLLTJCSDJJII7IIZPLTBQNWP7MZH7F/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/U35OARLQCPMVCBBPHWBXY5M6XJLD2TZ5/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/VSK5V4W4OHPM3JTJGWAQD6CZW7SFD75B/
kb	www.kb.isc.org/docs/cve-2023-3341
lists	www.lists.debian.org/debian-lts-announce/2024/01/msg00021.html
openwall	www.openwall.com/lists/oss-security/2023/09/20/2
security	www.security.netapp.com/advisory/ntap-20231013-0003/

31 Jan 2024 00:06Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.5

EPSS0.02647

SSVC

stack exhaustion control channel named termination network access CVE-2023-3341