7.5

CVE-2023-5679

A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.
This issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

Data is provided by the National Vulnerability Database (NVD)
Netapp ≫ Active Iq Unified Manager Version- SwPlatformvmware_vsphere
Fedoraproject ≫ Fedora Version38
Fedoraproject ≫ Fedora Version39
Isc ≫ Bind SwEdition- Version >= 9.16.12 <= 9.16.45
Isc ≫ Bind SwEdition- Version >= 9.18.0 <= 9.18.21
Isc ≫ Bind SwEdition- Version >= 9.19.0 <= 9.19.19
Isc ≫ Bind Version9.16.12 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.13 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.14 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.21 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.32 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.36 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.43 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.16.45 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.18.11 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.18.18 Updates1 SwEditionsupported_preview
Isc ≫ Bind Version9.18.21 Updates1 SwEditionsupported_preview
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.16% 0.37
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
security-officer@isc.org 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-617 Reachable Assertion

The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.