CVE-2023-5680

Cleaning an ECS-enabled cache may cause excessive CPU load

CVSS 5.3 MEDIUMEPSS 0.6%

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance. This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

ISC · BIND 9

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://kb.isc.org/docs/cve-2023-5680 https://security.netapp.com/advisory/ntap-20240503-0005/