Homepage

Stack-based Buffer Overflow The advisory has been revoked - it doesn't affect any version of package bind-dnssec-doc  (opens in a new tab)

Threat Intelligence

EPSS
2.45% (83rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS9-BINDDNSSECDOC-5732786
  • published22 Jun 2023
  • disclosed21 Jun 2023
Report a new vulnerability Found a mistake?

Introduced: 21 Jun 2023

CVE-2023-2911  (opens in a new tab)
CWE-121  (opens in a new tab)

Amendment

The Centos security team deemed this advisory irrelevant for Centos:9.

NVD Description

Note: Versions mentioned in the description apply only to the upstream bind-dnssec-doc package and not the bind-dnssec-doc package as distributed by Centos.

If the recursive-clients quota is reached on a BIND 9 resolver configured with both stale-answer-enable yes; and stale-answer-client-timeout 0;, a sequence of serve-stale-related lookups could cause named to loop and terminate unexpectedly due to a stack overflow. This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.