Non évaluée
The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS t...
CVE-2023-4408
Première détection SecPulse
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2023-4408 bind Corrigé dans: 9.16.48-r0
- Debian DEBIAN-CVE-2023-4408 bind9 Corrigé dans: 1:9.16.48-1
- Ubuntu UBUNTU-CVE-2023-4408 bind9
Description d'origine La description telle que publiée par la source (souvent en anglais).
The DNS message parsing code in named includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected named instance by exploiting this flaw. This issue affects both authoritative servers and recursive resolvers.
This issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.
Références
- advisory openwall.com
- advisory kb.isc.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory security.netapp.com