CVE-2023-5679

CWE-617 — Reachable Assertion9 documents8 sources
Severity
7.5HIGH
EPSS
0.1%
top 65.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
ISC Bind 9ISC BindFedoraproject Fedora
Timeline
PublishedFeb 13

Description

A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled. This issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶Alpinebind< 9.16.48-r0+7
▶Debianbind9< 1:9.16.48-1+3
▶NVDisc/bind9.16.12 — 9.16.45+13
▶CVEListV5isc/bind_99.16.12 — 9.16.45+4

Also affects: Fedora 38, 39

🔴Vulnerability Details

4
OSV
CVE-2023-5679: A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these f↗2024-02-13
▶
CVEList
Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution↗2024-02-13
▶
GHSA
GHSA-v5qp-mx94-j49v: A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these f↗2024-02-13
▶
OSV
CVE-2023-5679: A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these f↗2024-02-13
▶

📋Vendor Advisories

4
Red Hat
bind9: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution↗2024-02-13
▶
Microsoft
Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution↗2024-02-13
▶
Ubuntu
Bind vulnerabilities↗2024-02-13
▶
Debian
CVE-2023-5679: bind9 - A bad interaction between DNS64 and serve-stale may cause `named` to crash with ...↗2023
▶