CVE-2023-5680
Fixed in a distro release EPSS <1%CVSS 5.3
If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance. This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.
Products: ISC BIND 9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.16 | bind | 9.16.48-r0 |
| Alpine 3.17 | bind | 9.18.24-r0 |
| Alpine 3.18 | bind | 9.18.24-r0 |
| Alpine 3.19 | bind | 9.18.24-r0 |
| Alpine 3.20 | bind | 9.18.24-r0 |
| Alpine 3.21 | bind | 9.18.24-r0 |
| Alpine 3.22 | bind | 9.18.24-r0 |
| Alpine 3.23 | bind | 9.18.24-r0 |
| Alpine 3.24 | bind | 9.18.24-r0 |
| Chainguard | bind | 9.18.25-r0 |
| Chainguard | bind-dev | 9.18.25-r0 |
| Chainguard | bind-dnssec-root | 9.18.25-r0 |
| Chainguard | bind-dnssec-tools | 9.18.25-r0 |
| Chainguard | bind-doc | 9.18.25-r0 |
| Chainguard | bind-libs | 9.18.25-r0 |
| Chainguard | bind-plugins | 9.18.25-r0 |
| Chainguard | bind-tools | 9.18.25-r0 |
| Wolfi | bind | 9.18.25-r0 |
| Wolfi | bind-dev | 9.18.25-r0 |
| Wolfi | bind-dnssec-root | 9.18.25-r0 |
| Wolfi | bind-dnssec-tools | 9.18.25-r0 |
| Wolfi | bind-doc | 9.18.25-r0 |
| Wolfi | bind-libs | 9.18.25-r0 |
| Wolfi | bind-plugins | 9.18.25-r0 |
| Wolfi | bind-tools | 9.18.25-r0 |