CVE-2023-2829

HIGH

BIND <9.16.41-S1, <9.18.15-S1 - DoS

Title source: llm

Description

A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option (`synth-from-dnssec`) enabled can be remotely terminated using a zone with a malformed NSEC record. This issue affects BIND 9 versions 9.16.8-S1 through 9.16.41-S1 and 9.18.11-S1 through 9.18.15-S1.

References (2)

Scores

CVSS v3 7.5
EPSS 0.0007
EPSS Percentile 21.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

Status published

Affected Products (7)

isc/bind < 9.16.41
netapp/active_iq_unified_manager
netapp/h500s_firmware
netapp/h700s_firmware
netapp/h410s_firmware
netapp/h410c_firmware
netapp/h300s_firmware

Timeline

Published Jun 21, 2023
Tracked Since Feb 18, 2026