CVE-2023-5680
Cleaning an ECS-enabled cache may cause excessive CPU load
At a glance Severity MEDIUM 5.3 EPSS EPSS 0.63 % · percentile 50 (2026-10-27) State PUBLISHED Published 2024-02-13 Updated 2025-03-17 Assigner isc NVD status Modified Description If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance.
This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.
Scores Version Score Vector Scored by CVSS 3.1 MEDIUM 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L isc CVSS 3.1 MEDIUM 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L NVD · security-officer@isc.org (Secondary)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.3:s4:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.4:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.5:s3:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.5:s5:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.5:s6:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.8:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.12:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.21:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.27:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.29:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.35:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.11.37:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.16.8:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.16.11:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.16.12:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.16.13:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.16.14:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.16.21:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.16.32:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.16.36:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.16.43:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.18.11:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.18.18:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.18.21:s1:*:*:supported_preview:*:*:*cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*Affected products Product Versions ISC · BIND 9 affected 9.11.3-S1 ≤ 9.11.37-S1 ; affected 9.16.8-S1 ≤ 9.16.45-S1 ; affected 9.18.11-S1 ≤ 9.18.21-S1
References
Sources
