CVE-2023-2911

概要

参考情報

• openwall.com/lists/oss-security/2023/06/21/6 · Mailing List
• kb.isc.org/docs/cve-2023-2911 · Vendor Advisory
• lists.fedoraproject.org/archives/list/[email protected]/message/SEFCEVCTYEMKTWA7V7EYPI5YQQ4JWDLI · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/U3K6AJK7RRSR53HRF5GGKPA6PDUDWOD2 · Mailing List
• security.netapp.com/advisory/ntap-20230703-0010 · Third Party Advisory
• debian.org/security/2023/dsa-5439 · Third Party Advisory

bind のその他の脆弱性

• CVE-2026-5950中 5.3An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthentic…
• CVE-2026-5947中 5.9Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signe…
• CVE-2026-5946高 7.5Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CH…
• CVE-2026-3593緊急 9.8A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9…
• CVE-2026-3592中 5.3BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially cra…