CVE-2023-4408
CVE-2023-4408 · Parsing large DNS messages may cause excessive CPU load
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` instance by exploiting this flaw. This issue affects both authoritative servers and recursive resolvers. This issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.
CVSS 7.5 · Alta · EPSS 1,4% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
bind 9
- Versiones
- ≥ 9.0.0, ≤ 9.16.45: Afectada (custom)
- ≥ 9.18.0, ≤ 9.18.21: Afectada (custom)
- ≥ 9.19.0, ≤ 9.19.19: Afectada (custom)
- ≥ 9.9.3-S1, ≤ 9.11.37-S1: Afectada (custom)
- ≥ 9.16.8-S1, ≤ 9.16.45-S1: Afectada (custom)
- ≥ 9.18.11-S1, ≤ 9.18.21-S1: Afectada (custom)
Sin corrección publicada
bind9 Debian:12
- Versiones
- 1:9.18.12-1
- 1:9.18.13-1
- 1:9.18.16-1
- 1:9.18.16-1~deb12u1
- 1:9.18.16-1~deb12u1~bpo11+1
- 1:9.18.19-1~deb12u1
- 1:9.18.19-1~deb12u1~bpo11+1
- 1:9.18.24-1~bpo11+1
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.18.24-1
Actualiza a 1:9.18.24-1
bind9 Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.19.21-1
Actualiza a 1:9.19.21-1
bind9 Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.19.21-1
Actualiza a 1:9.19.21-1
bind9 Ubuntu:Pro:14.04:LTS
- Versiones
- 1:9.9.3.dfsg.P2-4ubuntu1
- 1:9.9.3.dfsg.P2-4ubuntu2
- 1:9.9.3.dfsg.P2-4ubuntu3
- 1:9.9.5.dfsg-2
- 1:9.9.5.dfsg-3
- 1:9.9.5.dfsg-3ubuntu0.1
- 1:9.9.5.dfsg-3ubuntu0.2
- 1:9.9.5.dfsg-3ubuntu0.3
- 1:9.9.5.dfsg-3ubuntu0.4
- 1:9.9.5.dfsg-3ubuntu0.5
- 1:9.9.5.dfsg-3ubuntu0.6
- 1:9.9.5.dfsg-3ubuntu0.7
- 1:9.9.5.dfsg-3ubuntu0.8
- 1:9.9.5.dfsg-3ubuntu0.9
- 1:9.9.5.dfsg-3ubuntu0.10
- 1:9.9.5.dfsg-3ubuntu0.11
- 1:9.9.5.dfsg-3ubuntu0.12
- 1:9.9.5.dfsg-3ubuntu0.13
- 1:9.9.5.dfsg-3ubuntu0.14
- 1:9.9.5.dfsg-3ubuntu0.15
- 1:9.9.5.dfsg-3ubuntu0.16
- 1:9.9.5.dfsg-3ubuntu0.17
- 1:9.9.5.dfsg-3ubuntu0.18
- 1:9.9.5.dfsg-3ubuntu0.19
- 1:9.9.5.dfsg-3ubuntu0.19+esm1
- 1:9.9.5.dfsg-3ubuntu0.19+esm2
- 1:9.9.5.dfsg-3ubuntu0.19+esm3
- 1:9.9.5.dfsg-3ubuntu0.19+esm4
- 1:9.9.5.dfsg-3ubuntu0.19+esm5
- 1:9.9.5.dfsg-3ubuntu0.19+esm6
- 1:9.9.5.dfsg-3ubuntu0.19+esm7
- 1:9.9.5.dfsg-3ubuntu0.19+esm9
- 1:9.9.5.dfsg-3ubuntu0.19+esm10
- 1:9.9.5.dfsg-3ubuntu0.19+esm11
- 1:9.9.5.dfsg-3ubuntu0.19+esm12
- 1:9.9.5.dfsg-3ubuntu0.19+esm13
- 1:9.9.5.dfsg-3ubuntu0.19+esm14
- 1:9.9.5.dfsg-3ubuntu0.19+esm15
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
bind9 Ubuntu:Pro:16.04:LTS
- Versiones
- 1:9.9.5.dfsg-11ubuntu1
- 1:9.9.5.dfsg-12
- 1:9.9.5.dfsg-12.1
- 1:9.9.5.dfsg-12.1ubuntu1
- 1:9.10.3.dfsg.P2-4
- 1:9.10.3.dfsg.P2-5
- 1:9.10.3.dfsg.P4-3
- 1:9.10.3.dfsg.P4-4
- 1:9.10.3.dfsg.P4-5
- 1:9.10.3.dfsg.P4-8
- 1:9.10.3.dfsg.P4-8ubuntu1
- 1:9.10.3.dfsg.P4-8ubuntu1.1
- 1:9.10.3.dfsg.P4-8ubuntu1.2
- 1:9.10.3.dfsg.P4-8ubuntu1.3
- 1:9.10.3.dfsg.P4-8ubuntu1.4
- 1:9.10.3.dfsg.P4-8ubuntu1.5
- 1:9.10.3.dfsg.P4-8ubuntu1.6
- 1:9.10.3.dfsg.P4-8ubuntu1.7
- 1:9.10.3.dfsg.P4-8ubuntu1.8
- 1:9.10.3.dfsg.P4-8ubuntu1.9
- 1:9.10.3.dfsg.P4-8ubuntu1.10
- 1:9.10.3.dfsg.P4-8ubuntu1.11
- 1:9.10.3.dfsg.P4-8ubuntu1.12
- 1:9.10.3.dfsg.P4-8ubuntu1.14
- 1:9.10.3.dfsg.P4-8ubuntu1.15
- 1:9.10.3.dfsg.P4-8ubuntu1.16
- 1:9.10.3.dfsg.P4-8ubuntu1.17
- 1:9.10.3.dfsg.P4-8ubuntu1.18
- 1:9.10.3.dfsg.P4-8ubuntu1.19
- 1:9.10.3.dfsg.P4-8ubuntu1.19+esm1
- 1:9.10.3.dfsg.P4-8ubuntu1.19+esm2
- 1:9.10.3.dfsg.P4-8ubuntu1.19+esm3
- 1:9.10.3.dfsg.P4-8ubuntu1.19+esm5
- 1:9.10.3.dfsg.P4-8ubuntu1.19+esm6
- 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7
- 1:9.10.3.dfsg.P4-8ubuntu1.19+esm8
- 1:9.10.3.dfsg.P4-8ubuntu1.19+esm9
- 1:9.10.3.dfsg.P4-8ubuntu1.19+esm10
- 1:9.10.3.dfsg.P4-8ubuntu1.19+esm11
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
bind9 Ubuntu:Pro:18.04:LTS
- Versiones
- 1:9.10.3.dfsg.P4-12.6ubuntu1
- 1:9.11.2.P1-1ubuntu2
- 1:9.11.2.P1-1ubuntu3
- 1:9.11.2.P1-1ubuntu4
- 1:9.11.2.P1-1ubuntu5
- 1:9.11.3+dfsg-1ubuntu1
- 1:9.11.3+dfsg-1ubuntu1.1
- 1:9.11.3+dfsg-1ubuntu1.2
- 1:9.11.3+dfsg-1ubuntu1.3
- 1:9.11.3+dfsg-1ubuntu1.5
- 1:9.11.3+dfsg-1ubuntu1.7
- 1:9.11.3+dfsg-1ubuntu1.8
- 1:9.11.3+dfsg-1ubuntu1.9
- 1:9.11.3+dfsg-1ubuntu1.10
- 1:9.11.3+dfsg-1ubuntu1.11
- 1:9.11.3+dfsg-1ubuntu1.12
- 1:9.11.3+dfsg-1ubuntu1.13
- 1:9.11.3+dfsg-1ubuntu1.14
- 1:9.11.3+dfsg-1ubuntu1.15
- 1:9.11.3+dfsg-1ubuntu1.16
- 1:9.11.3+dfsg-1ubuntu1.17
- 1:9.11.3+dfsg-1ubuntu1.18
- 1:9.11.3+dfsg-1ubuntu1.19+esm1
- 1:9.11.3+dfsg-1ubuntu1.19+esm2
- 1:9.11.3+dfsg-1ubuntu1.19+esm3
- 1:9.11.3+dfsg-1ubuntu1.19+esm4
- 1:9.11.3+dfsg-1ubuntu1.19+esm5
- 1:9.11.3+dfsg-1ubuntu1.19+esm6
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
bind9 Ubuntu:20.04:LTS
- Versiones
- 1:9.11.5.P4+dfsg-5.1ubuntu2
- 1:9.11.5.P4+dfsg-5.1ubuntu3
- 1:9.11.5.P4+dfsg-5.1ubuntu4
- 1:9.11.5.P4+dfsg-5.1ubuntu5
- 1:9.11.14+dfsg-1ubuntu1
- 1:9.11.14+dfsg-3ubuntu1
- 1:9.16.0-1ubuntu3
- 1:9.16.0-1ubuntu4
- 1:9.16.0-1ubuntu5
- 1:9.16.1-0ubuntu1
- 1:9.16.1-0ubuntu2
- 1:9.16.1-0ubuntu2.1
- 1:9.16.1-0ubuntu2.2
- 1:9.16.1-0ubuntu2.3
- 1:9.16.1-0ubuntu2.4
- 1:9.16.1-0ubuntu2.6
- 1:9.16.1-0ubuntu2.7
- 1:9.16.1-0ubuntu2.8
- 1:9.16.1-0ubuntu2.9
- 1:9.16.1-0ubuntu2.10
- 1:9.16.1-0ubuntu2.11
- 1:9.16.1-0ubuntu2.12
- 1:9.16.1-0ubuntu2.14
- 1:9.16.1-0ubuntu2.15
- 1:9.16.1-0ubuntu2.16
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.16.48-0ubuntu0.20.04.1
Actualiza a 1:9.16.48-0ubuntu0.20.04.1
bind9-libs Ubuntu:20.04:LTS
- Versiones
- 1:9.11.16+dfsg-3~build1
- 1:9.11.16+dfsg-3~ubuntu1
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
bind9 Ubuntu:22.04:LTS
- Versiones
- 1:9.16.15-1ubuntu1
- 1:9.16.15-1ubuntu2
- 1:9.16.15-1ubuntu3
- 1:9.18.0-2ubuntu1
- 1:9.18.0-2ubuntu2
- 1:9.18.0-2ubuntu3
- 1:9.18.1-1ubuntu1
- 1:9.18.1-1ubuntu1.1
- 1:9.18.1-1ubuntu1.2
- 1:9.18.1-1ubuntu1.3
- 1:9.18.12-0ubuntu0.22.04.1
- 1:9.18.12-0ubuntu0.22.04.2
- 1:9.18.12-0ubuntu0.22.04.3
- 1:9.18.18-0ubuntu0.22.04.1
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.18.18-0ubuntu0.22.04.2
Actualiza a 1:9.18.18-0ubuntu0.22.04.2
bind9-libs Ubuntu:22.04:LTS
- Versiones
- 1:9.11.19+dfsg-2.1ubuntu1
- 1:9.11.19+dfsg-2.1ubuntu2
- 1:9.11.19+dfsg-2.1ubuntu3
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
isc-dhcp Ubuntu:24.04:LTS
- Versiones
- 4.4.3-P1-2ubuntu5
- 4.4.3-P1-4ubuntu1
- 4.4.3-P1-4ubuntu2
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
isc-dhcp Ubuntu:25.10
- Versiones
- 4.4.3-P1-4ubuntu2
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
isc-dhcp Ubuntu:26.04:LTS
- Versiones
- 4.4.3-P1-4ubuntu2
- Intervalos de versiones afectados
- ECOSYSTEM: (−∞, +∞)
Sin corrección publicada
Fuentes originales
- https://kb.isc.org/docs/cve-2023-4408
- http://www.openwall.com/lists/oss-security/2024/02/13/1
- https://lists.fedoraproject.org/archives/list/[email protected]/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/
- https://lists.fedoraproject.org/archives/list/[email protected]/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/
- https://security.netapp.com/advisory/ntap-20240426-0001/
- https://nvd.nist.gov/vuln/detail/CVE-2023-4408