CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-2911

If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow. This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 23.8%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2023-2911

Isc » Bind » Version: 9.16.36

cpe:2.3:a:isc:bind:9.16.36
Isc » Bind » Version: 9.16.37

cpe:2.3:a:isc:bind:9.16.37
Isc » Bind » Version: 9.18.10

cpe:2.3:a:isc:bind:9.18.10
Isc » Bind » Version: 9.18.11

cpe:2.3:a:isc:bind:9.18.11
Isc » Bind » Version: 9.18.7

cpe:2.3:a:isc:bind:9.18.7
Isc » Bind » Version: 9.18.8

cpe:2.3:a:isc:bind:9.18.8
Netapp » Active Iq Unified Manager » Version: N/A

cpe:2.3:a:netapp:active_iq_unified_manager:-
Netapp » H300s » Version: N/A

cpe:2.3:h:netapp:h300s:-
Netapp » H410c » Version: N/A

cpe:2.3:h:netapp:h410c:-
Netapp » H410s » Version: N/A

cpe:2.3:h:netapp:h410s:-
Netapp » H500s » Version: N/A

cpe:2.3:h:netapp:h500s:-
Netapp » H700s » Version: N/A

cpe:2.3:h:netapp:h700s:-
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0
Debian » Debian Linux » Version: 12.0

cpe:2.3:o:debian:debian_linux:12.0
Fedoraproject » Fedora » Version: 37

cpe:2.3:o:fedoraproject:fedora:37
Fedoraproject » Fedora » Version: 38

cpe:2.3:o:fedoraproject:fedora:38
Netapp » H300s Firmware » Version: N/A

cpe:2.3:o:netapp:h300s_firmware:-
Netapp » H410c Firmware » Version: N/A

cpe:2.3:o:netapp:h410c_firmware:-
Netapp » H410s Firmware » Version: N/A

cpe:2.3:o:netapp:h410s_firmware:-
Netapp » H500s Firmware » Version: N/A

cpe:2.3:o:netapp:h500s_firmware:-
Netapp » H700s Firmware » Version: N/A

cpe:2.3:o:netapp:h700s_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-2911

Products

Pricing

Contact Us