This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2023-5680 | BDVDB-2026-224375 Detail

ISCBIND 9

Description#

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance. This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

Impact#

By sending specific queries to a resolver, an attacker can degrade `named`'s query-handling performance. In the worst-case scenario, a resolver can become entirely unresponsive.

Weaknesses#

No weakness recorded in the source data.

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.