CVE-2023-5517

Description

References

• openwall.com/lists/oss-security/2024/02/13/1 · Mailing List
• kb.isc.org/docs/cve-2023-5517 · Vendor Advisory
• lists.fedoraproject.org/archives/list/[email protected]/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R · Mailing List
• security.netapp.com/advisory/ntap-20240503-0006 · Third Party Advisory

Autres vulnérabilités de bind

• CVE-2026-5950MOYENNE 5.3An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthentic…
• CVE-2026-5947MOYENNE 5.9Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signe…
• CVE-2026-5946ÉLEVÉE 7.5Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CH…
• CVE-2026-3593CRITIQUE 9.8A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9…
• CVE-2026-3592MOYENNE 5.3BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially cra…