CVE-2023-5679
Fixed in a distro release EPSS 1%CVSS 7.5
A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled. This issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.
Products: ISC BIND 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux:8 | bind9.16 | 32:9.16.23-0.16.el8_9.2.alma.1 |
| AlmaLinux:8 | bind9.16-chroot | 32:9.16.23-0.16.el8_9.2.alma.1 |
| AlmaLinux:8 | bind9.16-devel | 32:9.16.23-0.16.el8_9.2.alma.1 |
| AlmaLinux:8 | bind9.16-dnssec-utils | 32:9.16.23-0.16.el8_9.2.alma.1 |
| AlmaLinux:8 | bind9.16-doc | 32:9.16.23-0.16.el8_9.2.alma.1 |
| AlmaLinux:8 | bind9.16-libs | 32:9.16.23-0.16.el8_9.2.alma.1 |
| AlmaLinux:8 | bind9.16-license | 32:9.16.23-0.16.el8_9.2.alma.1 |
| AlmaLinux:8 | bind9.16-utils | 32:9.16.23-0.16.el8_9.2.alma.1 |
| AlmaLinux:8 | python3-bind9.16 | 32:9.16.23-0.16.el8_9.2.alma.1 |
| AlmaLinux:9 | bind | 32:9.16.23-14.el9_3.4 |
| AlmaLinux:9 | bind | 32:9.16.23-18.el9_4.1 |
| AlmaLinux:9 | bind-chroot | 32:9.16.23-14.el9_3.4 |
| AlmaLinux:9 | bind-chroot | 32:9.16.23-18.el9_4.1 |
| AlmaLinux:9 | bind-devel | 32:9.16.23-14.el9_3.4 |
| AlmaLinux:9 | bind-devel | 32:9.16.23-18.el9_4.1 |
| AlmaLinux:9 | bind-dnssec-doc | 32:9.16.23-18.el9_4.1 |
| AlmaLinux:9 | bind-dnssec-doc | 32:9.16.23-14.el9_3.4 |
| AlmaLinux:9 | bind-dnssec-utils | 32:9.16.23-18.el9_4.1 |
| AlmaLinux:9 | bind-dnssec-utils | 32:9.16.23-14.el9_3.4 |
| AlmaLinux:9 | bind-doc | 32:9.16.23-18.el9_4.1 |
| AlmaLinux:9 | bind-doc | 32:9.16.23-14.el9_3.4 |
| AlmaLinux:9 | bind-dyndb-ldap | 11.9-8.el9_3.3.alma.1 |
| AlmaLinux:9 | bind-dyndb-ldap | 11.9-9.el9_4.alma.1 |
| AlmaLinux:9 | bind-libs | 32:9.16.23-14.el9_3.4 |
| AlmaLinux:9 | bind-libs | 32:9.16.23-18.el9_4.1 |
| AlmaLinux:9 | bind-license | 32:9.16.23-14.el9_3.4 |
| AlmaLinux:9 | bind-license | 32:9.16.23-18.el9_4.1 |
| AlmaLinux:9 | bind-utils | 32:9.16.23-14.el9_3.4 |
| AlmaLinux:9 | bind-utils | 32:9.16.23-18.el9_4.1 |
| AlmaLinux:9 | python3-bind | 32:9.16.23-14.el9_3.4 |
| AlmaLinux:9 | python3-bind | 32:9.16.23-18.el9_4.1 |
| Alpine:v3.16 | bind | 9.16.48-r0 |
| Alpine:v3.17 | bind | 9.18.24-r0 |
| Alpine:v3.18 | bind | 9.18.24-r0 |
| Alpine:v3.19 | bind | 9.18.24-r0 |
| Alpine:v3.20 | bind | 9.18.24-r0 |
| Alpine:v3.21 | bind | 9.18.24-r0 |
| Alpine:v3.22 | bind | 9.18.24-r0 |
| Alpine:v3.23 | bind | 9.18.24-r0 |
| Alpine:v3.24 | bind | 9.18.24-r0 |
| Chainguard | bind | 9.18.24-r0 |
| Chainguard | bind-dev | 9.18.24-r0 |
| Chainguard | bind-dnssec-root | 9.18.24-r0 |
| Chainguard | bind-dnssec-tools | 9.18.24-r0 |
| Chainguard | bind-doc | 9.18.24-r0 |
| Chainguard | bind-libs | 9.18.24-r0 |
| Chainguard | bind-plugins | 9.18.24-r0 |
| Chainguard | bind-tools | 9.18.24-r0 |
| Debian:11 | bind9 | 1:9.16.48-1 |
| Debian:12 | bind9 | 1:9.18.24-1 |
| Debian:13 | bind9 | 1:9.19.21-1 |
| Debian:14 | bind9 | 1:9.19.21-1 |
| Red Hat:enterprise_linux:8 | bind9.16 | 32:9.16.23-0.16.el8_9.2 |
| Red Hat:enterprise_linux:8 | bind9.16-chroot | 32:9.16.23-0.16.el8_9.2 |
| Red Hat:enterprise_linux:8 | bind9.16-debuginfo | 32:9.16.23-0.16.el8_9.2 |
| Red Hat:enterprise_linux:8 | bind9.16-debugsource | 32:9.16.23-0.16.el8_9.2 |
| Red Hat:enterprise_linux:8 | bind9.16-devel | 32:9.16.23-0.16.el8_9.2 |
| Red Hat:enterprise_linux:8 | bind9.16-dnssec-utils | 32:9.16.23-0.16.el8_9.2 |
| Red Hat:enterprise_linux:8 | bind9.16-dnssec-utils-debuginfo | 32:9.16.23-0.16.el8_9.2 |
| Red Hat:enterprise_linux:8 | bind9.16-doc | 32:9.16.23-0.16.el8_9.2 |
| Red Hat:enterprise_linux:8 | bind9.16-libs | 32:9.16.23-0.16.el8_9.2 |
| Red Hat:enterprise_linux:8 | bind9.16-libs-debuginfo | 32:9.16.23-0.16.el8_9.2 |
| Red Hat:enterprise_linux:8 | bind9.16-license | 32:9.16.23-0.16.el8_9.2 |
| Red Hat:enterprise_linux:8 | bind9.16-utils | 32:9.16.23-0.16.el8_9.2 |
| Red Hat:enterprise_linux:8 | bind9.16-utils-debuginfo | 32:9.16.23-0.16.el8_9.2 |
| Red Hat:enterprise_linux:8 | python3-bind9.16 | 32:9.16.23-0.16.el8_9.2 |
| Red Hat:enterprise_linux:9 | bind | 32:9.16.23-14.el9_3.4 |
| Red Hat:enterprise_linux:9 | bind | 32:9.16.23-18.el9_4.1 |
| Red Hat:enterprise_linux:9 | bind-chroot | 32:9.16.23-18.el9_4.1 |
| Red Hat:enterprise_linux:9 | bind-chroot | 32:9.16.23-14.el9_3.4 |
| Red Hat:enterprise_linux:9 | bind-debuginfo | 32:9.16.23-14.el9_3.4 |
| Red Hat:enterprise_linux:9 | bind-debuginfo | 32:9.16.23-18.el9_4.1 |
| Red Hat:enterprise_linux:9 | bind-debugsource | 32:9.16.23-14.el9_3.4 |
| Red Hat:enterprise_linux:9 | bind-debugsource | 32:9.16.23-18.el9_4.1 |
| Red Hat:enterprise_linux:9 | bind-devel | 32:9.16.23-18.el9_4.1 |
| Red Hat:enterprise_linux:9 | bind-devel | 32:9.16.23-14.el9_3.4 |
| Red Hat:enterprise_linux:9 | bind-dnssec-doc | 32:9.16.23-14.el9_3.4 |
| Red Hat:enterprise_linux:9 | bind-dnssec-doc | 32:9.16.23-18.el9_4.1 |
| Red Hat:enterprise_linux:9 | bind-dnssec-utils | 32:9.16.23-18.el9_4.1 |
| Red Hat:enterprise_linux:9 | bind-dnssec-utils | 32:9.16.23-14.el9_3.4 |
| Red Hat:enterprise_linux:9 | bind-dnssec-utils-debuginfo | 32:9.16.23-18.el9_4.1 |
| Red Hat:enterprise_linux:9 | bind-dnssec-utils-debuginfo | 32:9.16.23-14.el9_3.4 |
| Red Hat:enterprise_linux:9 | bind-doc | 32:9.16.23-14.el9_3.4 |
| Red Hat:enterprise_linux:9 | bind-doc | 32:9.16.23-18.el9_4.1 |
| Red Hat:enterprise_linux:9 | bind-dyndb-ldap | 0:11.9-8.el9_3.3 |
| Red Hat:enterprise_linux:9 | bind-dyndb-ldap | 0:11.9-9.el9_4 |
| Red Hat:enterprise_linux:9 | bind-dyndb-ldap-debuginfo | 0:11.9-8.el9_3.3 |
| Red Hat:enterprise_linux:9 | bind-dyndb-ldap-debuginfo | 0:11.9-9.el9_4 |
| Red Hat:enterprise_linux:9 | bind-dyndb-ldap-debugsource | 0:11.9-8.el9_3.3 |
| Red Hat:enterprise_linux:9 | bind-dyndb-ldap-debugsource | 0:11.9-9.el9_4 |
| Red Hat:enterprise_linux:9 | bind-libs | 32:9.16.23-14.el9_3.4 |
| Red Hat:enterprise_linux:9 | bind-libs | 32:9.16.23-18.el9_4.1 |
| Red Hat:enterprise_linux:9 | bind-libs-debuginfo | 32:9.16.23-14.el9_3.4 |
| Red Hat:enterprise_linux:9 | bind-libs-debuginfo | 32:9.16.23-18.el9_4.1 |
| Red Hat:enterprise_linux:9 | bind-license | 32:9.16.23-14.el9_3.4 |
| Red Hat:enterprise_linux:9 | bind-license | 32:9.16.23-18.el9_4.1 |
| Red Hat:enterprise_linux:9 | bind-utils | 32:9.16.23-14.el9_3.4 |
| Red Hat:enterprise_linux:9 | bind-utils | 32:9.16.23-18.el9_4.1 |
| Red Hat:enterprise_linux:9 | bind-utils-debuginfo | 32:9.16.23-14.el9_3.4 |
| Red Hat:enterprise_linux:9 | bind-utils-debuginfo | 32:9.16.23-18.el9_4.1 |
| Red Hat:enterprise_linux:9 | python3-bind | 32:9.16.23-18.el9_4.1 |
| Red Hat:enterprise_linux:9 | python3-bind | 32:9.16.23-14.el9_3.4 |
| Red Hat:rhel_eus:8.6 | bind9.16 | 32:9.16.23-0.7.el8_6.5 |
| Red Hat:rhel_eus:8.6 | bind9.16-chroot | 32:9.16.23-0.7.el8_6.5 |
| Red Hat:rhel_eus:8.6 | bind9.16-debuginfo | 32:9.16.23-0.7.el8_6.5 |
| Red Hat:rhel_eus:8.6 | bind9.16-debugsource | 32:9.16.23-0.7.el8_6.5 |
| Red Hat:rhel_eus:8.6 | bind9.16-devel | 32:9.16.23-0.7.el8_6.5 |
| Red Hat:rhel_eus:8.6 | bind9.16-dnssec-utils | 32:9.16.23-0.7.el8_6.5 |
| Red Hat:rhel_eus:8.6 | bind9.16-dnssec-utils-debuginfo | 32:9.16.23-0.7.el8_6.5 |
| Red Hat:rhel_eus:8.6 | bind9.16-doc | 32:9.16.23-0.7.el8_6.5 |
| Red Hat:rhel_eus:8.6 | bind9.16-libs | 32:9.16.23-0.7.el8_6.5 |
| Red Hat:rhel_eus:8.6 | bind9.16-libs-debuginfo | 32:9.16.23-0.7.el8_6.5 |
| Red Hat:rhel_eus:8.6 | bind9.16-license | 32:9.16.23-0.7.el8_6.5 |
| Red Hat:rhel_eus:8.6 | bind9.16-utils | 32:9.16.23-0.7.el8_6.5 |
| Red Hat:rhel_eus:8.6 | bind9.16-utils-debuginfo | 32:9.16.23-0.7.el8_6.5 |
| Red Hat:rhel_eus:8.6 | python3-bind9.16 | 32:9.16.23-0.7.el8_6.5 |
| Red Hat:rhel_eus:8.8 | bind9.16 | 32:9.16.23-0.14.el8_8.4 |
| Red Hat:rhel_eus:8.8 | bind9.16-chroot | 32:9.16.23-0.14.el8_8.4 |
| Red Hat:rhel_eus:8.8 | bind9.16-debuginfo | 32:9.16.23-0.14.el8_8.4 |
| Red Hat:rhel_eus:8.8 | bind9.16-debugsource | 32:9.16.23-0.14.el8_8.4 |
| Red Hat:rhel_eus:8.8 | bind9.16-devel | 32:9.16.23-0.14.el8_8.4 |
| Red Hat:rhel_eus:8.8 | bind9.16-dnssec-utils | 32:9.16.23-0.14.el8_8.4 |
| Red Hat:rhel_eus:8.8 | bind9.16-dnssec-utils-debuginfo | 32:9.16.23-0.14.el8_8.4 |
| Red Hat:rhel_eus:8.8 | bind9.16-doc | 32:9.16.23-0.14.el8_8.4 |
| Red Hat:rhel_eus:8.8 | bind9.16-libs | 32:9.16.23-0.14.el8_8.4 |
| Red Hat:rhel_eus:8.8 | bind9.16-libs-debuginfo | 32:9.16.23-0.14.el8_8.4 |
| Red Hat:rhel_eus:8.8 | bind9.16-license | 32:9.16.23-0.14.el8_8.4 |
| Red Hat:rhel_eus:8.8 | bind9.16-utils | 32:9.16.23-0.14.el8_8.4 |
| Red Hat:rhel_eus:8.8 | bind9.16-utils-debuginfo | 32:9.16.23-0.14.el8_8.4 |
| Red Hat:rhel_eus:8.8 | python3-bind9.16 | 32:9.16.23-0.14.el8_8.4 |
| Red Hat:rhel_eus:9.0 | bind | 32:9.16.23-1.el9_0.5 |
| Red Hat:rhel_eus:9.0 | bind-chroot | 32:9.16.23-1.el9_0.5 |
| Red Hat:rhel_eus:9.0 | bind-debuginfo | 32:9.16.23-1.el9_0.5 |
| Red Hat:rhel_eus:9.0 | bind-debugsource | 32:9.16.23-1.el9_0.5 |
| Red Hat:rhel_eus:9.0 | bind-devel | 32:9.16.23-1.el9_0.5 |
| Red Hat:rhel_eus:9.0 | bind-dnssec-doc | 32:9.16.23-1.el9_0.5 |
| Red Hat:rhel_eus:9.0 | bind-dnssec-utils | 32:9.16.23-1.el9_0.5 |
| Red Hat:rhel_eus:9.0 | bind-dnssec-utils-debuginfo | 32:9.16.23-1.el9_0.5 |
| Red Hat:rhel_eus:9.0 | bind-dyndb-ldap | 0:11.9-7.el9_0.1 |
| Red Hat:rhel_eus:9.0 | bind-dyndb-ldap-debuginfo | 0:11.9-7.el9_0.1 |
| Red Hat:rhel_eus:9.0 | bind-dyndb-ldap-debugsource | 0:11.9-7.el9_0.1 |
| Red Hat:rhel_eus:9.0 | bind-libs | 32:9.16.23-1.el9_0.5 |
| Red Hat:rhel_eus:9.0 | bind-libs-debuginfo | 32:9.16.23-1.el9_0.5 |
| Red Hat:rhel_eus:9.0 | bind-license | 32:9.16.23-1.el9_0.5 |
| Red Hat:rhel_eus:9.0 | bind-utils | 32:9.16.23-1.el9_0.5 |
| Red Hat:rhel_eus:9.0 | bind-utils-debuginfo | 32:9.16.23-1.el9_0.5 |
| Red Hat:rhel_eus:9.0 | python3-bind | 32:9.16.23-1.el9_0.5 |
| Red Hat:rhel_eus:9.2 | bind | 32:9.16.23-11.el9_2.4 |
| Red Hat:rhel_eus:9.2 | bind-chroot | 32:9.16.23-11.el9_2.4 |
| Red Hat:rhel_eus:9.2 | bind-debuginfo | 32:9.16.23-11.el9_2.4 |
| Red Hat:rhel_eus:9.2 | bind-debugsource | 32:9.16.23-11.el9_2.4 |
| Red Hat:rhel_eus:9.2 | bind-devel | 32:9.16.23-11.el9_2.4 |
| Red Hat:rhel_eus:9.2 | bind-dnssec-doc | 32:9.16.23-11.el9_2.4 |
| Red Hat:rhel_eus:9.2 | bind-dnssec-utils | 32:9.16.23-11.el9_2.4 |
| Red Hat:rhel_eus:9.2 | bind-dnssec-utils-debuginfo | 32:9.16.23-11.el9_2.4 |
| Red Hat:rhel_eus:9.2 | bind-doc | 32:9.16.23-11.el9_2.4 |
| Red Hat:rhel_eus:9.2 | bind-dyndb-ldap | 0:11.9-8.el9_2.2 |
| Red Hat:rhel_eus:9.2 | bind-dyndb-ldap-debuginfo | 0:11.9-8.el9_2.2 |
| Red Hat:rhel_eus:9.2 | bind-dyndb-ldap-debugsource | 0:11.9-8.el9_2.2 |
| Red Hat:rhel_eus:9.2 | bind-libs | 32:9.16.23-11.el9_2.4 |
| Red Hat:rhel_eus:9.2 | bind-libs-debuginfo | 32:9.16.23-11.el9_2.4 |
| Red Hat:rhel_eus:9.2 | bind-license | 32:9.16.23-11.el9_2.4 |
| Red Hat:rhel_eus:9.2 | bind-utils | 32:9.16.23-11.el9_2.4 |
| Red Hat:rhel_eus:9.2 | bind-utils-debuginfo | 32:9.16.23-11.el9_2.4 |
| Red Hat:rhel_eus:9.2 | python3-bind | 32:9.16.23-11.el9_2.4 |
| Rocky Linux:8 | bind9.16 | 2:9.16.23-0.16.el8_9.2 |
| Rocky Linux:9 | bind | 2:9.16.23-18.el9_4.1 |
| Rocky Linux:9 | bind-dyndb-ldap | 0:11.9-9.el9_4 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | bind | 9.16.48-150400.5.40.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | bind | 9.16.48-150400.5.40.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | bind | 9.16.48-150500.8.16.1 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP5 | bind | 9.16.48-150500.8.16.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | bind | 9.16.48-150400.5.40.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | bind | 9.16.48-150400.5.40.1 |
| SUSE:Manager Proxy 4.3 | bind | 9.16.48-150400.5.40.1 |
| SUSE:Manager Server 4.3 | bind | 9.16.48-150400.5.40.1 |
| Ubuntu:22.04:LTS | bind9 | 1:9.18.18-0ubuntu0.22.04.2 |
| Wolfi | bind | 9.18.24-r0 |
| Wolfi | bind-dev | 9.18.24-r0 |
| Wolfi | bind-dnssec-root | 9.18.24-r0 |
| Wolfi | bind-dnssec-tools | 9.18.24-r0 |
| Wolfi | bind-doc | 9.18.24-r0 |
| Wolfi | bind-libs | 9.18.24-r0 |
| Wolfi | bind-plugins | 9.18.24-r0 |
| Wolfi | bind-tools | 9.18.24-r0 |
| openSUSE:Leap 15.5 | bind | 9.16.48-150500.8.16.1 |
| openSUSE:Tumbleweed | bind | 9.18.24-1.1 |