PT-2023-5379 · Isc+4 · Bind 9+4

Robert Story · Published 2023-09-08 · Updated 2025-07-17 · CVE-2023-4236

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.18.0 through 9.18.18 BIND 9 versions 9.18.11-S1 through 9.18.18-S1

Description A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load.

Recommendations For BIND 9 versions 9.18.0 through 9.18.18, update to a version that fixes the issue. For BIND 9 versions 9.18.11-S1 through 9.18.18-S1, update to a version that fixes the issue. As a temporary workaround, consider restricting the load of DNS-over-TLS queries to minimize the risk of exploitation.

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

BDU:2023-06007

CVE-2023-4236

DSA-5504-1

MGASA-2023-0303

OPENSUSE-SU-2024:13249-1

USN-6390-1

Affected Products

Bind 9

Bind Server

Linuxmint

Red Os

Ubuntu

References · 51

• https://osv.dev/vulnerability/USN-6390-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-4236 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-4236 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/U35OARLQCPMVCBBPHWBXY5M6XJLD2TZ5 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6390-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DSA-5504-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13249-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/VSK5V4W4OHPM3JTJGWAQD6CZW7SFD75B · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-3341 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2023-0303.html · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/708741 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-4236 · Vendor Advisory
• https://kb.isc.org/docs/cve-2023-4236 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06007 · Security Note
• https://ubuntu.com/security/CVE-2023-4236 · Vendor Advisory