未評価
The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS t...
CVE-2023-4408
SecPulse初出
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Alpine Linux ALPINE-CVE-2023-4408 bind 修正版: 9.16.48-r0
- Debian DEBIAN-CVE-2023-4408 bind9 修正版: 1:9.16.48-1
- Ubuntu UBUNTU-CVE-2023-4408 bind9
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
The DNS message parsing code in named includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected named instance by exploiting this flaw. This issue affects both authoritative servers and recursive resolvers.
This issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.
参照URL
- advisory openwall.com
- advisory kb.isc.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory security.netapp.com