PT-2023-3296 · Isc+6 · Bind 9+6
Publicado
2023-06-21
·
Atualizado
2024-06-15
·
CVE-2023-2911
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
BIND 9 versions 9.16.33 through 9.16.41
BIND 9 versions 9.18.7 through 9.18.15
BIND 9 versions 9.16.33-S1 through 9.16.41-S1
BIND 9 versions 9.18.11-S1 through 9.18.15-S1
Description
A sequence of serve-stale-related lookups could cause
named to loop and terminate unexpectedly due to a stack overflow when the recursive-clients quota is reached on a BIND 9 resolver configured with both stale-answer-enable yes; and stale-answer-client-timeout 0;. This issue may allow a remote attacker to cause a denial of service.Recommendations
For BIND 9 versions 9.16.33 through 9.16.41, update to a version outside of this range to resolve the issue.
For BIND 9 versions 9.18.7 through 9.18.15, update to a version outside of this range to resolve the issue.
For BIND 9 versions 9.16.33-S1 through 9.16.41-S1, update to a version outside of this range to resolve the issue.
For BIND 9 versions 9.18.11-S1 through 9.18.15-S1, update to a version outside of this range to resolve the issue.
As a temporary workaround, consider disabling the
stale-answer-enable option or setting stale-answer-client-timeout to a non-zero value until a patch is available.Correção
Stack Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Bind 9
Bind Server
Linuxmint
Red Os
Suse
Ubuntu