PT-2023-5449 · Isc+12 · Bind 9+12
Publicado
2023-06-20
·
Atualizado
2024-07-25
·
CVE-2023-3341
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
BIND 9 versions 9.2.0 through 9.16.43
BIND 9 versions 9.18.0 through 9.18.18
BIND 9 versions 9.19.0 through 9.19.16
BIND 9 versions 9.9.3-S1 through 9.16.43-S1
BIND 9 versions 9.18.0-S1 through 9.18.18-S1
Description
The code that processes control channel messages sent to
named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing named to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary.Recommendations
For BIND 9 versions 9.2.0 through 9.16.43, update to a version that contains a fix for this issue.
For BIND 9 versions 9.18.0 through 9.18.18, update to a version that contains a fix for this issue.
For BIND 9 versions 9.19.0 through 9.19.16, update to a version that contains a fix for this issue.
For BIND 9 versions 9.9.3-S1 through 9.16.43-S1, update to a version that contains a fix for this issue.
For BIND 9 versions 9.18.0-S1 through 9.18.18-S1, update to a version that contains a fix for this issue.
As a temporary workaround, consider restricting access to the control channel's configured TCP port to minimize the risk of exploitation.
Exploit
Correção
DoS
Uncontrolled Recursion
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Almalinux
Astra Linux
Bind 9
Bind Server
Centos
Ibm Aix
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu