Vulnerability Details CVE-2023-4408
                The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` instance by exploiting this flaw. This issue affects both authoritative servers and recursive resolvers.
This issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.
                
                    Exploit prediction scoring system (EPSS) score
                    
                        
                            EPSS Score 0.003
                        
                    
                    
                        
                            EPSS Ranking 52.6%
                        
                    
                 
                
                    CVSS Severity
                    
                        
                            CVSS v3 Score 7.5
                        
                    
                    
                 
                
                
                
                    
                
                
                    
                        Products affected by CVE-2023-4408
                        
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.11.29
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.11.31
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.11.35
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.11.36
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.12.0
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.0
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.11
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.12
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.13
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.14
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.15
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.19
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.21
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.22
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.32
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.36
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.37
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.43
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.44
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.45
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.16.8
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.18.0
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.18.1
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.18.10
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.18.11
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.18.18
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.18.19
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.18.2
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.18.3
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.18.4
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.18.5
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.18.6
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.18.7
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.18.8
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.19.0
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.19.1
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.19.16
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.19.17
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.19.2
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.19.3
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.19.4
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.19.5
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.19.6
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.19.8
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:isc:bind:9.19.9
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                
 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:netapp:ontap:9.14.1
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:a:netapp:ontap:9.15.1
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:fedoraproject:fedora:38
                                        
                                     
                                 
                            
                                
                                - 
                                    
                                    
                                        
                                            cpe:2.3:o:fedoraproject:fedora:39