7.5

CVE-2023-5517

A flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when:

  - `nxdomain-redirect <domain>;` is configured, and
  - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response.
This issue affects BIND 9 versions 9.12.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

Data is provided by the National Vulnerability Database (NVD)
Netapp ≫ Active Iq Unified Manager Version- SwPlatformvmware_vsphere
Fedoraproject ≫ Fedora Version38
Fedoraproject ≫ Fedora Version39
Isc ≫ Bind SwEdition- Version >= 9.12.0 <= 9.16.45
Isc ≫ Bind SwEdition- Version >= 9.18.0 <= 9.18.21
Isc ≫ Bind SwEdition- Version >= 9.19.0 <= 9.19.19
Isc ≫ Bind Version9.16.8 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.11 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.12 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.13 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.14 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.21 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.32 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.36 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.43 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.45 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.18.11 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.18.18 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.18.21 Updates1 SwEditionsupported_preview
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.16% 0.371
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
security-officer@isc.org 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-617 Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.