Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 4 min 173 bronnen 2 kritiek 36 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2023-2911

HIGH · 7.5 CVSS Gepubliceerd: CWE-787

Beschrijving

If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow.
This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.

Vendors

Isc Debian Fedoraproject Netapp

Affected products

Bind Debian Linux Fedora Active Iq Unified Manager H700s Firmware H700s H300s Firmware H300s H410c Firmware H410c H410s Firmware H410s H500s Firmware H500s

References