CVE-2023-2911
High · 7.5CVSS
7.5
EPSS
2.4%
Published
Jun 21, 2023
CISA due date
—
Cloudanix analysis
There is not enough information available about this issue to understand what it affects or how serious it might be.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- Trivial
- Impact
- Other
- Component
- Other
- Class
- Other
- Remediation
- Other
- Effort
- Other
- Patch risk
- Other
What it actually does
No technical details or description provided; impact cannot be determined from available data.
Why it matters to the business
Unable to evaluate operational consequences due to absence of product, version, or flaw information; low EPSS score and lack of KEV status suggest limited known urgency after over three years.
How an attack unfolds
No exploitation details, threat actors, or attack methods available in the input data.
How to fix it
No fixed versions or affected products listed; apply vendor updates if they become available in the future.
How to confirm the fix worked
No methods available to confirm exposure or fixes from the provided CVE record.
How to detect it
No log sources, indicators, or artifacts can be derived from the empty description and metadata.
What your security team should do
- Track the CVE for any future updates to description or affected components
- Maintain standard patching processes given low EPSS and no KEV listing
The record
If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow. This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Alpine:v3.15 | bind | 0 | 9.16.42-r0 |
| Debian:11 | bind9 | 0 | 1:9.16.42-1~deb11u1 |
| Debian:12 | bind9 | 0 | 1:9.18.16-1~deb12u1 |
| Debian:13 | bind9 | 0 | 1:9.18.16-1 |
| Debian:14 | bind9 | 0 | 1:9.18.16-1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP4 | bind | 0 | 9.16.42-150400.5.27.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | bind | 0 | 9.16.42-150500.8.3.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP4 | bind | 0 | 9.16.42-150400.5.27.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP5 | bind | 0 | 9.16.42-150500.8.3.1 |
| Ubuntu:20.04:LTS | bind9 | 0 | 1:9.16.1-0ubuntu2.15 |
| Ubuntu:22.04:LTS | bind9 | 0 | 1:9.18.12-0ubuntu0.22.04.2 |
| Ubuntu:Pro:18.04:LTS | isc-dhcp | 0 | No fix |
| openSUSE:Leap 15.4 | bind | 0 | 9.16.42-150400.5.27.1 |
| openSUSE:Leap 15.5 | bind | 0 | 9.16.42-150500.8.3.1 |
| openSUSE:Tumbleweed | bind | 0 | 9.18.16-1.1 |
Related vulnerabilities
- CVE-2022-2795 By flooding the target resolver with queries exploiting this flaw an attacker can… Also affects bind
- CVE-2022-38178 By spoofing the target resolver with responses that have a malformed EdDSA signature, an… Also affects bind
- CVE-2022-38177 By spoofing the target resolver with responses that have a malformed ECDSA signature, an… Also affects bind
- CVE-2016-9131 named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before… Also affects bind
- CVE-2016-9147 named in ISC BIND 9.9.9-P4, 9.9.9-S6, 9.10.4-P4, and 9.11.0-P1 allows remote attackers to… Also affects bind
- CVE-2016-9444 named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before… Also affects bind
- CVE-2025-40775 When an incoming DNS protocol message includes a Transaction Signature (TSIG), BIND… Also affects bind9
- CVE-2024-11187 It is possible to construct a zone such that some queries to it will generate responses… Also affects bind9