CVE-2023-5517

Fixed in a distro release EPSS 1%CVSS 7.5

A flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when: - `nxdomain-redirect <domain>;` is configured, and - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response. This issue affects BIND 9 versions 9.12.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

Published 2024-02-13 · CVE record · OSV

Products: ISC BIND 9

Distro releases

Release	Package	Fixed in
AlmaLinux 8	bind9.16	32:9.16.23-0.16.el8_9.2.alma.1
AlmaLinux 8	bind9.16-chroot	32:9.16.23-0.16.el8_9.2.alma.1
AlmaLinux 8	bind9.16-devel	32:9.16.23-0.16.el8_9.2.alma.1
AlmaLinux 8	bind9.16-dnssec-utils	32:9.16.23-0.16.el8_9.2.alma.1
AlmaLinux 8	bind9.16-doc	32:9.16.23-0.16.el8_9.2.alma.1
AlmaLinux 8	bind9.16-libs	32:9.16.23-0.16.el8_9.2.alma.1
AlmaLinux 8	bind9.16-license	32:9.16.23-0.16.el8_9.2.alma.1
AlmaLinux 8	bind9.16-utils	32:9.16.23-0.16.el8_9.2.alma.1
AlmaLinux 8	python3-bind9.16	32:9.16.23-0.16.el8_9.2.alma.1
AlmaLinux 9	bind	32:9.16.23-14.el9_3.4
AlmaLinux 9	bind	32:9.16.23-18.el9_4.1
AlmaLinux 9	bind-chroot	32:9.16.23-14.el9_3.4
AlmaLinux 9	bind-chroot	32:9.16.23-18.el9_4.1
AlmaLinux 9	bind-devel	32:9.16.23-18.el9_4.1
AlmaLinux 9	bind-devel	32:9.16.23-14.el9_3.4
AlmaLinux 9	bind-dnssec-doc	32:9.16.23-14.el9_3.4
AlmaLinux 9	bind-dnssec-doc	32:9.16.23-18.el9_4.1
AlmaLinux 9	bind-dnssec-utils	32:9.16.23-14.el9_3.4
AlmaLinux 9	bind-dnssec-utils	32:9.16.23-18.el9_4.1
AlmaLinux 9	bind-doc	32:9.16.23-18.el9_4.1
AlmaLinux 9	bind-doc	32:9.16.23-14.el9_3.4
AlmaLinux 9	bind-dyndb-ldap	11.9-8.el9_3.3.alma.1
AlmaLinux 9	bind-dyndb-ldap	11.9-9.el9_4.alma.1
AlmaLinux 9	bind-libs	32:9.16.23-14.el9_3.4
AlmaLinux 9	bind-libs	32:9.16.23-18.el9_4.1
AlmaLinux 9	bind-license	32:9.16.23-18.el9_4.1
AlmaLinux 9	bind-license	32:9.16.23-14.el9_3.4
AlmaLinux 9	bind-utils	32:9.16.23-14.el9_3.4
AlmaLinux 9	bind-utils	32:9.16.23-18.el9_4.1
AlmaLinux 9	python3-bind	32:9.16.23-14.el9_3.4
AlmaLinux 9	python3-bind	32:9.16.23-18.el9_4.1
Alpine 3.16	bind	9.16.48-r0
Alpine 3.17	bind	9.18.24-r0
Alpine 3.18	bind	9.18.24-r0
Alpine 3.19	bind	9.18.24-r0
Alpine 3.20	bind	9.18.24-r0
Alpine 3.21	bind	9.18.24-r0
Alpine 3.22	bind	9.18.24-r0
Alpine 3.23	bind	9.18.24-r0
Alpine 3.24	bind	9.18.24-r0
Chainguard	bind	9.18.24-r0
Chainguard	bind-dev	9.18.24-r0
Chainguard	bind-dnssec-root	9.18.24-r0
Chainguard	bind-dnssec-tools	9.18.24-r0
Chainguard	bind-doc	9.18.24-r0
Chainguard	bind-libs	9.18.24-r0
Chainguard	bind-plugins	9.18.24-r0
Chainguard	bind-tools	9.18.24-r0
Debian 11	bind9	1:9.16.48-1
Debian 12	bind9	1:9.18.24-1
Debian 13	bind9	1:9.19.21-1
Debian 14	bind9	1:9.19.21-1
Red Hat Enterprise Linux 8	bind9.16	32:9.16.23-0.16.el8_9.2
Red Hat Enterprise Linux 8	bind9.16-chroot	32:9.16.23-0.16.el8_9.2
Red Hat Enterprise Linux 8	bind9.16-debuginfo	32:9.16.23-0.16.el8_9.2
Red Hat Enterprise Linux 8	bind9.16-debugsource	32:9.16.23-0.16.el8_9.2
Red Hat Enterprise Linux 8	bind9.16-devel	32:9.16.23-0.16.el8_9.2
Red Hat Enterprise Linux 8	bind9.16-dnssec-utils	32:9.16.23-0.16.el8_9.2
Red Hat Enterprise Linux 8	bind9.16-dnssec-utils-debuginfo	32:9.16.23-0.16.el8_9.2
Red Hat Enterprise Linux 8	bind9.16-doc	32:9.16.23-0.16.el8_9.2
Red Hat Enterprise Linux 8	bind9.16-libs	32:9.16.23-0.16.el8_9.2
Red Hat Enterprise Linux 8	bind9.16-libs-debuginfo	32:9.16.23-0.16.el8_9.2
Red Hat Enterprise Linux 8	bind9.16-license	32:9.16.23-0.16.el8_9.2
Red Hat Enterprise Linux 8	bind9.16-utils	32:9.16.23-0.16.el8_9.2
Red Hat Enterprise Linux 8	bind9.16-utils-debuginfo	32:9.16.23-0.16.el8_9.2
Red Hat Enterprise Linux 8	python3-bind9.16	32:9.16.23-0.16.el8_9.2
Red Hat Enterprise Linux 9	bind	32:9.16.23-18.el9_4.1
Red Hat Enterprise Linux 9	bind	32:9.16.23-14.el9_3.4
Red Hat Enterprise Linux 9	bind-chroot	32:9.16.23-14.el9_3.4
Red Hat Enterprise Linux 9	bind-chroot	32:9.16.23-18.el9_4.1
Red Hat Enterprise Linux 9	bind-debuginfo	32:9.16.23-14.el9_3.4
Red Hat Enterprise Linux 9	bind-debuginfo	32:9.16.23-18.el9_4.1
Red Hat Enterprise Linux 9	bind-debugsource	32:9.16.23-14.el9_3.4
Red Hat Enterprise Linux 9	bind-debugsource	32:9.16.23-18.el9_4.1
Red Hat Enterprise Linux 9	bind-devel	32:9.16.23-14.el9_3.4
Red Hat Enterprise Linux 9	bind-devel	32:9.16.23-18.el9_4.1
Red Hat Enterprise Linux 9	bind-dnssec-doc	32:9.16.23-14.el9_3.4
Red Hat Enterprise Linux 9	bind-dnssec-doc	32:9.16.23-18.el9_4.1
Red Hat Enterprise Linux 9	bind-dnssec-utils	32:9.16.23-14.el9_3.4
Red Hat Enterprise Linux 9	bind-dnssec-utils	32:9.16.23-18.el9_4.1
Red Hat Enterprise Linux 9	bind-dnssec-utils-debuginfo	32:9.16.23-14.el9_3.4
Red Hat Enterprise Linux 9	bind-dnssec-utils-debuginfo	32:9.16.23-18.el9_4.1
Red Hat Enterprise Linux 9	bind-doc	32:9.16.23-14.el9_3.4
Red Hat Enterprise Linux 9	bind-doc	32:9.16.23-18.el9_4.1
Red Hat Enterprise Linux 9	bind-dyndb-ldap	0:11.9-9.el9_4
Red Hat Enterprise Linux 9	bind-dyndb-ldap	0:11.9-8.el9_3.3
Red Hat Enterprise Linux 9	bind-dyndb-ldap-debuginfo	0:11.9-9.el9_4
Red Hat Enterprise Linux 9	bind-dyndb-ldap-debuginfo	0:11.9-8.el9_3.3
Red Hat Enterprise Linux 9	bind-dyndb-ldap-debugsource	0:11.9-9.el9_4
Red Hat Enterprise Linux 9	bind-dyndb-ldap-debugsource	0:11.9-8.el9_3.3
Red Hat Enterprise Linux 9	bind-libs	32:9.16.23-14.el9_3.4
Red Hat Enterprise Linux 9	bind-libs	32:9.16.23-18.el9_4.1
Red Hat Enterprise Linux 9	bind-libs-debuginfo	32:9.16.23-14.el9_3.4
Red Hat Enterprise Linux 9	bind-libs-debuginfo	32:9.16.23-18.el9_4.1
Red Hat Enterprise Linux 9	bind-license	32:9.16.23-14.el9_3.4
Red Hat Enterprise Linux 9	bind-license	32:9.16.23-18.el9_4.1
Red Hat Enterprise Linux 9	bind-utils	32:9.16.23-14.el9_3.4
Red Hat Enterprise Linux 9	bind-utils	32:9.16.23-18.el9_4.1
Red Hat Enterprise Linux 9	bind-utils-debuginfo	32:9.16.23-18.el9_4.1
Red Hat Enterprise Linux 9	bind-utils-debuginfo	32:9.16.23-14.el9_3.4
Red Hat Enterprise Linux 9	python3-bind	32:9.16.23-18.el9_4.1
Red Hat Enterprise Linux 9	python3-bind	32:9.16.23-14.el9_3.4
Red Hat rhel eus 8.6	bind9.16	32:9.16.23-0.7.el8_6.5
Red Hat rhel eus 8.6	bind9.16-chroot	32:9.16.23-0.7.el8_6.5
Red Hat rhel eus 8.6	bind9.16-debuginfo	32:9.16.23-0.7.el8_6.5
Red Hat rhel eus 8.6	bind9.16-debugsource	32:9.16.23-0.7.el8_6.5
Red Hat rhel eus 8.6	bind9.16-devel	32:9.16.23-0.7.el8_6.5
Red Hat rhel eus 8.6	bind9.16-dnssec-utils	32:9.16.23-0.7.el8_6.5
Red Hat rhel eus 8.6	bind9.16-dnssec-utils-debuginfo	32:9.16.23-0.7.el8_6.5
Red Hat rhel eus 8.6	bind9.16-doc	32:9.16.23-0.7.el8_6.5
Red Hat rhel eus 8.6	bind9.16-libs	32:9.16.23-0.7.el8_6.5
Red Hat rhel eus 8.6	bind9.16-libs-debuginfo	32:9.16.23-0.7.el8_6.5
Red Hat rhel eus 8.6	bind9.16-license	32:9.16.23-0.7.el8_6.5
Red Hat rhel eus 8.6	bind9.16-utils	32:9.16.23-0.7.el8_6.5
Red Hat rhel eus 8.6	bind9.16-utils-debuginfo	32:9.16.23-0.7.el8_6.5
Red Hat rhel eus 8.6	python3-bind9.16	32:9.16.23-0.7.el8_6.5
Red Hat rhel eus 8.8	bind9.16	32:9.16.23-0.14.el8_8.4
Red Hat rhel eus 8.8	bind9.16-chroot	32:9.16.23-0.14.el8_8.4
Red Hat rhel eus 8.8	bind9.16-debuginfo	32:9.16.23-0.14.el8_8.4
Red Hat rhel eus 8.8	bind9.16-debugsource	32:9.16.23-0.14.el8_8.4
Red Hat rhel eus 8.8	bind9.16-devel	32:9.16.23-0.14.el8_8.4
Red Hat rhel eus 8.8	bind9.16-dnssec-utils	32:9.16.23-0.14.el8_8.4
Red Hat rhel eus 8.8	bind9.16-dnssec-utils-debuginfo	32:9.16.23-0.14.el8_8.4
Red Hat rhel eus 8.8	bind9.16-doc	32:9.16.23-0.14.el8_8.4
Red Hat rhel eus 8.8	bind9.16-libs	32:9.16.23-0.14.el8_8.4
Red Hat rhel eus 8.8	bind9.16-libs-debuginfo	32:9.16.23-0.14.el8_8.4
Red Hat rhel eus 8.8	bind9.16-license	32:9.16.23-0.14.el8_8.4
Red Hat rhel eus 8.8	bind9.16-utils	32:9.16.23-0.14.el8_8.4
Red Hat rhel eus 8.8	bind9.16-utils-debuginfo	32:9.16.23-0.14.el8_8.4
Red Hat rhel eus 8.8	python3-bind9.16	32:9.16.23-0.14.el8_8.4
Red Hat rhel eus 9.0	bind	32:9.16.23-1.el9_0.5
Red Hat rhel eus 9.0	bind-chroot	32:9.16.23-1.el9_0.5
Red Hat rhel eus 9.0	bind-debuginfo	32:9.16.23-1.el9_0.5
Red Hat rhel eus 9.0	bind-debugsource	32:9.16.23-1.el9_0.5
Red Hat rhel eus 9.0	bind-devel	32:9.16.23-1.el9_0.5
Red Hat rhel eus 9.0	bind-dnssec-doc	32:9.16.23-1.el9_0.5
Red Hat rhel eus 9.0	bind-dnssec-utils	32:9.16.23-1.el9_0.5
Red Hat rhel eus 9.0	bind-dnssec-utils-debuginfo	32:9.16.23-1.el9_0.5
Red Hat rhel eus 9.0	bind-dyndb-ldap	0:11.9-7.el9_0.1
Red Hat rhel eus 9.0	bind-dyndb-ldap-debuginfo	0:11.9-7.el9_0.1
Red Hat rhel eus 9.0	bind-dyndb-ldap-debugsource	0:11.9-7.el9_0.1
Red Hat rhel eus 9.0	bind-libs	32:9.16.23-1.el9_0.5
Red Hat rhel eus 9.0	bind-libs-debuginfo	32:9.16.23-1.el9_0.5
Red Hat rhel eus 9.0	bind-license	32:9.16.23-1.el9_0.5
Red Hat rhel eus 9.0	bind-utils	32:9.16.23-1.el9_0.5
Red Hat rhel eus 9.0	bind-utils-debuginfo	32:9.16.23-1.el9_0.5
Red Hat rhel eus 9.0	python3-bind	32:9.16.23-1.el9_0.5
Red Hat rhel eus 9.2	bind	32:9.16.23-11.el9_2.4
Red Hat rhel eus 9.2	bind-chroot	32:9.16.23-11.el9_2.4
Red Hat rhel eus 9.2	bind-debuginfo	32:9.16.23-11.el9_2.4
Red Hat rhel eus 9.2	bind-debugsource	32:9.16.23-11.el9_2.4
Red Hat rhel eus 9.2	bind-devel	32:9.16.23-11.el9_2.4
Red Hat rhel eus 9.2	bind-dnssec-doc	32:9.16.23-11.el9_2.4
Red Hat rhel eus 9.2	bind-dnssec-utils	32:9.16.23-11.el9_2.4
Red Hat rhel eus 9.2	bind-dnssec-utils-debuginfo	32:9.16.23-11.el9_2.4
Red Hat rhel eus 9.2	bind-doc	32:9.16.23-11.el9_2.4
Red Hat rhel eus 9.2	bind-dyndb-ldap	0:11.9-8.el9_2.2
Red Hat rhel eus 9.2	bind-dyndb-ldap-debuginfo	0:11.9-8.el9_2.2
Red Hat rhel eus 9.2	bind-dyndb-ldap-debugsource	0:11.9-8.el9_2.2
Red Hat rhel eus 9.2	bind-libs	32:9.16.23-11.el9_2.4
Red Hat rhel eus 9.2	bind-libs-debuginfo	32:9.16.23-11.el9_2.4
Red Hat rhel eus 9.2	bind-license	32:9.16.23-11.el9_2.4
Red Hat rhel eus 9.2	bind-utils	32:9.16.23-11.el9_2.4
Red Hat rhel eus 9.2	bind-utils-debuginfo	32:9.16.23-11.el9_2.4
Red Hat rhel eus 9.2	python3-bind	32:9.16.23-11.el9_2.4
Rocky Linux 8	bind9.16	2:9.16.23-0.16.el8_9.2
Rocky Linux 9	bind	2:9.16.23-18.el9_4.1
Rocky Linux 9	bind-dyndb-ldap	0:11.9-9.el9_4
SUSE Enterprise Storage 7.1	bind	9.16.6-150300.22.44.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	bind	9.16.6-150000.12.74.2
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS	libuv	1.18.0-150000.3.2.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	bind	9.16.6-150300.22.44.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	bind	9.16.48-150400.5.40.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	bind	9.16.48-150400.5.40.1
SUSE Linux Enterprise Module for Basesystem 15 SP5	bind	9.16.48-150500.8.16.1
SUSE Linux Enterprise Module for Basesystem 15 SP6	bind	9.16.6-150300.22.44.1
SUSE Linux Enterprise Module for Server Applications 15 SP5	bind	9.16.48-150500.8.16.1
SUSE Linux Enterprise Server 15 SP2-LTSS	bind	9.16.6-150000.12.74.2
SUSE Linux Enterprise Server 15 SP2-LTSS	libuv	1.18.0-150000.3.2.1
SUSE Linux Enterprise Server 15 SP3-LTSS	bind	9.16.6-150300.22.44.1
SUSE Linux Enterprise Server 15 SP4-LTSS	bind	9.16.48-150400.5.40.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2	bind	9.16.6-150000.12.74.2
SUSE Linux Enterprise Server for SAP Applications 15 SP2	libuv	1.18.0-150000.3.2.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3	bind	9.16.6-150300.22.44.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4	bind	9.16.48-150400.5.40.1
SUSE Manager Client Tools for SLE Micro 5	bind	9.16.6-150000.12.74.2
SUSE Manager Client Tools for SLE Micro 5	libuv	1.18.0-150000.3.2.1
SUSE Manager Proxy 4.3	bind	9.16.48-150400.5.40.1
SUSE Manager Server 4.3	bind	9.16.48-150400.5.40.1
Ubuntu 20.04 LTS	bind9	1:9.16.48-0ubuntu0.20.04.1
Ubuntu 22.04 LTS	bind9	1:9.18.18-0ubuntu0.22.04.2
Wolfi	bind	9.18.24-r0
Wolfi	bind-dev	9.18.24-r0
Wolfi	bind-dnssec-root	9.18.24-r0
Wolfi	bind-dnssec-tools	9.18.24-r0
Wolfi	bind-doc	9.18.24-r0
Wolfi	bind-libs	9.18.24-r0
Wolfi	bind-plugins	9.18.24-r0
Wolfi	bind-tools	9.18.24-r0
openSUSE Leap 15.5	bind	9.16.48-150500.8.16.1
openSUSE Tumbleweed	bind	9.18.24-1.1