CVE-2023-4236

HIGH 7.5CVE-2023-4236 · Published 20/09/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
bind isc	`= 9.18.11= 9.18.18≥ 9.18.0, < 9.18.18`	`9.18.18`

Description

A flaw in the networking code handling DNS-over-TLS queries may cause `named` to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load. This issue affects BIND 9 versions 9.18.0 through 9.18.18 and 9.18.11-S1 through 9.18.18-S1.

References

openwall.com/lists/oss-security/2023/09/20/2 · Mailing List
kb.isc.org/docs/cve-2023-4236 · Vendor Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/IPJLLTJCSDJJII7IIZPLTBQNWP7MZH7F · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/U35OARLQCPMVCBBPHWBXY5M6XJLD2TZ5 · Mailing List
lists.fedoraproject.org/archives/list/[email protected]/message/VSK5V4W4OHPM3JTJGWAQD6CZW7SFD75B · Mailing List
security.netapp.com/advisory/ntap-20231013-0004 · Third Party Advisory
debian.org/security/2023/dsa-5504 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free