CVE-2023-4236

Description

References

• openwall.com/lists/oss-security/2023/09/20/2 · Mailing List
• kb.isc.org/docs/cve-2023-4236 · Vendor Advisory
• lists.fedoraproject.org/archives/list/[email protected]/message/IPJLLTJCSDJJII7IIZPLTBQNWP7MZH7F · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/U35OARLQCPMVCBBPHWBXY5M6XJLD2TZ5 · Mailing List
• lists.fedoraproject.org/archives/list/[email protected]/message/VSK5V4W4OHPM3JTJGWAQD6CZW7SFD75B · Mailing List
• security.netapp.com/advisory/ntap-20231013-0004 · Third Party Advisory
• debian.org/security/2023/dsa-5504 · Third Party Advisory

Mais vulnerabilidades de bind

• CVE-2026-5950MÉDIO 5.3An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthentic…
• CVE-2026-5947MÉDIO 5.9Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signe…
• CVE-2026-5946ALTO 7.5Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CH…
• CVE-2026-3593CRÍTICO 9.8A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9…
• CVE-2026-3592MÉDIO 5.3BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially cra…