Yüksek CVSS 7.5
CVE-2023-2911: Bind: sınır dışı yazma
Açıklama (NVD)
If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow. This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.
Özet bilgiler
- Ürün
- Isc Bind
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %2,43 (yüzdelik 84)
- CWE
- CWE-787
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| isc-bind | 9.16.33 | 9.16.41 | — |
| isc-bind | 9.16.33 | 9.16.41 | — |
| isc-bind | 9.18.7 | 9.18.15 | — |
| isc-bind | 9.18.11 | 9.18.15 | — |
| debian-debian-linux | 11.0 | 11.0 | — |
| debian-debian-linux | 12.0 | 12.0 | — |
| fedoraproject-fedora | 37 | 37 | — |
| fedoraproject-fedora | 38 | 38 | — |
| debian-debian-linux | 11.0 | 11.0 | — |
| debian-debian-linux | 12.0 | 12.0 | — |
| netapp-active-iq-unified-manager | — | — | — |
| netapp-h700s-firmware | — | — | — |
| netapp-h300s-firmware | — | — | — |
| netapp-h410c-firmware | — | — | — |
| netapp-h410s-firmware | — | — | — |
| netapp-h500s-firmware | — | — | — |