PT-2023-3296 · Isc+6 · Bind 9+6

Published 2023-06-21 · Updated 2024-06-15 · CVE-2023-2911

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.16.33 through 9.16.41 BIND 9 versions 9.18.7 through 9.18.15 BIND 9 versions 9.16.33-S1 through 9.16.41-S1 BIND 9 versions 9.18.11-S1 through 9.18.15-S1

Description A sequence of serve-stale-related lookups could cause named to loop and terminate unexpectedly due to a stack overflow when the recursive-clients quota is reached on a BIND 9 resolver configured with both stale-answer-enable yes; and stale-answer-client-timeout 0;. This issue may allow a remote attacker to cause a denial of service.

Recommendations For BIND 9 versions 9.16.33 through 9.16.41, update to a version outside of this range to resolve the issue. For BIND 9 versions 9.18.7 through 9.18.15, update to a version outside of this range to resolve the issue. For BIND 9 versions 9.16.33-S1 through 9.16.41-S1, update to a version outside of this range to resolve the issue. For BIND 9 versions 9.18.11-S1 through 9.18.15-S1, update to a version outside of this range to resolve the issue. As a temporary workaround, consider disabling the stale-answer-enable option or setting stale-answer-client-timeout to a non-zero value until a patch is available.

Fix

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121

CWE-787

Related Identifiers

ALT-PU-2023-2044

ALT-PU-2023-2102

ALT-PU-2024-1988

AZL-27237

BDU:2023-03436

CVE-2023-2911

DSA-5439-1

OPENSUSE-SU-2024:13015-1

SUSE-SU-2023:2667-1

SUSE-SU-2023:2836-1

USN-6183-1

Affected Products

Alt Linux

Bind 9

Bind Server

Linuxmint

Red Os

Suse

Ubuntu

References · 43

• https://security-tracker.debian.org/tracker/CVE-2023-2911 · Vendor Advisory
• https://kb.isc.org/docs/cve-2023-2911 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-2828 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2911 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/U3K6AJK7RRSR53HRF5GGKPA6PDUDWOD2 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-2911 · Security Note
• https://osv.dev/vulnerability/DSA-5439-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2023-2911 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2667-1 · Vendor Advisory
• https://debian.org/security/2023/dsa-5439 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6183-1 · Vendor Advisory
• http://openwall.com/lists/oss-security/2023/06/21/6 · Patch
• https://ubuntu.com/security/notices/USN-6183-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-2911 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2836-1 · Vendor Advisory