CVE-2023-2829

7.5 Élevée

Publiée le 21/06/2023 à 19:15 · Modifiée le 24/10/2026 à 21:10 · Modifiée · Source : security-officer@isc.org

Description

A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option (`synth-from-dnssec`) enabled can be remotely terminated using a zone with a malformed NSEC record. This issue affects BIND 9 versions 9.16.8-S1 through 9.16.41-S1 and 9.18.11-S1 through 9.18.15-S1.

Traduire en français

Produits concernés

ISC BIND 9
Isc bind
Netapp active iq unified manager
Netapp h500s firmware
Netapp h700s firmware
Netapp h410s firmware
Netapp h410c firmware
Netapp h300s firmware

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.5 Élevée	security-officer@isc.org	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`

Références

https://kb.isc.org/docs/cve-2023-2829 Vendor Advisory
https://security.netapp.com/advisory/ntap-20230703-0010/ Third Party Advisory
https://kb.isc.org/docs/cve-2023-2829 Vendor Advisory
https://security.netapp.com/advisory/ntap-20230703-0010/ Third Party Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories