CVEvulnerability

CVE-2023-2911

7.5 HIGH Published 2023-06-21 Modified 2026-10-24 Official page ↗
Status
Modified
Published
2023-06-21
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-787

Description

If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow. This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.

Affected configurations

• isc bind (>= 9.16.33 <= 9.16.41) • isc bind (>= 9.18.7 <= 9.18.15) • isc bind (>= 9.18.11 <= 9.18.15) • debian debian linux 11.0 • debian debian linux 12.0 • fedoraproject fedora 37 • fedoraproject fedora 38 • netapp active iq unified manager • netapp h700s firmware • netapp h300s firmware • netapp h410c firmware • netapp h410s firmware • netapp h500s firmware

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References