Vulnerability Database

296,720

Total vulnerabilities in the database

CVE-2023-4236

A flaw in the networking code handling DNS-over-TLS queries may cause named to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load. This issue affects BIND 9 versions 9.18.0 through 9.18.18 and 9.18.11-S1 through 9.18.18-S1.

  • Published: Sep 20, 2023
  • Updated: Sep 21, 2023
  • CVE: CVE-2023-4236
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
isc / bind 9.18.18-s1 9.18.18-s1.x
isc / bind 9.18.0 9.18.18
isc / bind 9.18.11-s1 9.18.11-s1.x
fedoraproject / fedora 37 37.x
fedoraproject / fedora 38 38.x
fedoraproject / fedora 39 39.x
debian / debian_linux 10.0 10.0.x
debian / debian_linux 11.0 11.0.x