PT-2023-5449 · Isc+12 · Bind 9+12
Published
2023-06-20
·
Updated
2024-07-25
·
CVE-2023-3341
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
BIND 9 versions 9.2.0 through 9.16.43
BIND 9 versions 9.18.0 through 9.18.18
BIND 9 versions 9.19.0 through 9.19.16
BIND 9 versions 9.9.3-S1 through 9.16.43-S1
BIND 9 versions 9.18.0-S1 through 9.18.18-S1
Description
The code that processes control channel messages sent to
named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing named to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary.Recommendations
For BIND 9 versions 9.2.0 through 9.16.43, update to a version that contains a fix for this issue.
For BIND 9 versions 9.18.0 through 9.18.18, update to a version that contains a fix for this issue.
For BIND 9 versions 9.19.0 through 9.19.16, update to a version that contains a fix for this issue.
For BIND 9 versions 9.9.3-S1 through 9.16.43-S1, update to a version that contains a fix for this issue.
For BIND 9 versions 9.18.0-S1 through 9.18.18-S1, update to a version that contains a fix for this issue.
As a temporary workaround, consider restricting access to the control channel's configured TCP port to minimize the risk of exploitation.
Exploit
Fix
DoS
Uncontrolled Recursion
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Bind 9
Bind Server
Centos
Ibm Aix
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu