CVEvulnerability

CVE-2023-2829

7.5 HIGH Published 2023-06-21 Modified 2026-10-24 Official page ↗
Status
Modified
Published
2023-06-21
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option (`synth-from-dnssec`) enabled can be remotely terminated using a zone with a malformed NSEC record. This issue affects BIND 9 versions 9.16.8-S1 through 9.16.41-S1 and 9.18.11-S1 through 9.18.15-S1.

Affected configurations

• isc bind (>= 9.16.8 <= 9.16.41) • isc bind (>= 9.18.11 <= 9.18.15) • netapp active iq unified manager • netapp h500s firmware • netapp h700s firmware • netapp h410s firmware • netapp h410c firmware • netapp h300s firmware

References