CVE-2023-4236
Fixed in a distro release EPSS 2%CVSS 7.5
A flaw in the networking code handling DNS-over-TLS queries may cause `named` to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load. This issue affects BIND 9 versions 9.18.0 through 9.18.18 and 9.18.11-S1 through 9.18.18-S1.
Products: ISC BIND 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine:v3.17 | bind | 9.18.19-r0 |
| Alpine:v3.18 | bind | 9.18.19-r0 |
| Alpine:v3.19 | bind | 9.18.19-r0 |
| Alpine:v3.20 | bind | 9.18.19-r0 |
| Alpine:v3.21 | bind | 9.18.19-r0 |
| Alpine:v3.22 | bind | 9.18.19-r0 |
| Alpine:v3.23 | bind | 9.18.19-r0 |
| Alpine:v3.24 | bind | 9.18.19-r0 |
| Debian:12 | bind9 | 1:9.18.19-1~deb12u1 |
| Debian:13 | bind9 | 1:9.19.17-1 |
| Debian:14 | bind9 | 1:9.19.17-1 |
| Ubuntu:20.04:LTS | bind9 | 1:9.16.1-0ubuntu2.16 |
| Ubuntu:22.04:LTS | bind9 | 1:9.18.12-0ubuntu0.22.04.3 |
| Ubuntu:24.04:LTS | bind9 | 1:9.18.18-0ubuntu2 |
| openSUSE:Tumbleweed | bind | 9.18.19-1.1 |