Read the docs
TI-2023-03126 Aliases CVE-2023-3341GHSA-w5c6-c6wv-54h7

A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly

Priority MEDIUM 44CWE-1325Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-787 and the CVSS impact.

Summary

The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.02934 87th percentileScored 2026-11-07
Fix Fixed Red Hat: 11 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ISCBIND 99.2.0 – 9.16.43; 9.18.0 – 9.18.18; 9.19.0 – 9.19.16; 9.9.3-S1 – 9.16.43-S1; 9.18.0-S1 – 9.18.18-S1—No fix listedCNA
  • BIND 9 VendorISC Affected 9.2.0 – 9.16.43; 9.18.0 – 9.18.18; 9.19.0 – 9.19.16; 9.9.3-S1 – 9.16.43-S1; 9.18.0-S1 – 9.18.18-S1 Fixed in — No fix listed CNA

CPE configurations NVD · 36

CPEVersionsRoleVendor
cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*9.2.0 to before 9.16.44; 9.18.0 to before 9.18.19; 9.19.0 to before 9.19.17VulnerableISC
cpe:2.3:a:isc:bind:9.9.3:s1:*:*:supported_preview:*:*:*9.9.3 s1VulnerableISC
cpe:2.3:a:isc:bind:9.9.12:s1:*:*:supported_preview:*:*:*9.9.12 s1VulnerableISC
cpe:2.3:a:isc:bind:9.9.13:s1:*:*:supported_preview:*:*:*9.9.13 s1VulnerableISC
cpe:2.3:a:isc:bind:9.10.5:s1:*:*:supported_preview:*:*:*9.10.5 s1VulnerableISC
cpe:2.3:a:isc:bind:9.10.7:s1:*:*:supported_preview:*:*:*9.10.7 s1VulnerableISC
cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*9.11.3 s1VulnerableISC
cpe:2.3:a:isc:bind:9.11.3:s4:*:*:supported_preview:*:*:*9.11.3 s4VulnerableISC
cpe:2.3:a:isc:bind:9.11.4:s1:*:*:supported_preview:*:*:*9.11.4 s1VulnerableISC
cpe:2.3:a:isc:bind:9.11.5:s3:*:*:supported_preview:*:*:*9.11.5 s3VulnerableISC
  • cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:* Versions 9.2.0 to before 9.16.44; 9.18.0 to before 9.18.19; 9.19.0 to before 9.19.17 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.3:s1:*:*:supported_preview:*:*:* Versions 9.9.3 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.12:s1:*:*:supported_preview:*:*:* Versions 9.9.12 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.9.13:s1:*:*:supported_preview:*:*:* Versions 9.9.13 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.5:s1:*:*:supported_preview:*:*:* Versions 9.10.5 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.10.7:s1:*:*:supported_preview:*:*:* Versions 9.10.7 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:* Versions 9.11.3 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.3:s4:*:*:supported_preview:*:*:* Versions 9.11.3 s4 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.4:s1:*:*:supported_preview:*:*:* Versions 9.11.4 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.5:s3:*:*:supported_preview:*:*:* Versions 9.11.5 s3 Vulnerable ·ISC
Show 26 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:isc:bind:9.11.5:s5:*:*:supported_preview:*:*:*9.11.5 s5VulnerableISC
cpe:2.3:a:isc:bind:9.11.5:s6:*:*:supported_preview:*:*:*9.11.5 s6VulnerableISC
cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*9.11.6 s1VulnerableISC
cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:*9.11.7 s1VulnerableISC
cpe:2.3:a:isc:bind:9.11.8:s1:*:*:supported_preview:*:*:*9.11.8 s1VulnerableISC
cpe:2.3:a:isc:bind:9.11.12:s1:*:*:supported_preview:*:*:*9.11.12 s1VulnerableISC
cpe:2.3:a:isc:bind:9.11.21:s1:*:*:supported_preview:*:*:*9.11.21 s1VulnerableISC
cpe:2.3:a:isc:bind:9.11.27:s1:*:*:supported_preview:*:*:*9.11.27 s1VulnerableISC
cpe:2.3:a:isc:bind:9.11.29:s1:*:*:supported_preview:*:*:*9.11.29 s1VulnerableISC
cpe:2.3:a:isc:bind:9.11.35:s1:*:*:supported_preview:*:*:*9.11.35 s1VulnerableISC
cpe:2.3:a:isc:bind:9.11.37:s1:*:*:supported_preview:*:*:*9.11.37 s1VulnerableISC
cpe:2.3:a:isc:bind:9.16.8:s1:*:*:supported_preview:*:*:*9.16.8 s1VulnerableISC
cpe:2.3:a:isc:bind:9.16.11:s1:*:*:supported_preview:*:*:*9.16.11 s1VulnerableISC
cpe:2.3:a:isc:bind:9.16.12:s1:*:*:supported_preview:*:*:*9.16.12 s1VulnerableISC
cpe:2.3:a:isc:bind:9.16.13:s1:*:*:supported_preview:*:*:*9.16.13 s1VulnerableISC
cpe:2.3:a:isc:bind:9.16.14:s1:*:*:supported_preview:*:*:*9.16.14 s1VulnerableISC
cpe:2.3:a:isc:bind:9.16.21:s1:*:*:supported_preview:*:*:*9.16.21 s1VulnerableISC
cpe:2.3:a:isc:bind:9.16.32:s1:*:*:supported_preview:*:*:*9.16.32 s1VulnerableISC
cpe:2.3:a:isc:bind:9.16.36:s1:*:*:supported_preview:*:*:*9.16.36 s1VulnerableISC
cpe:2.3:a:isc:bind:9.16.43:s1:*:*:supported_preview:*:*:*9.16.43 s1VulnerableISC
cpe:2.3:a:isc:bind:9.18.0:s1:*:*:supported_preview:*:*:*9.18.0 s1VulnerableISC
cpe:2.3:a:isc:bind:9.18.18:s1:*:*:supported_preview:*:*:*9.18.18 s1VulnerableISC
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*37VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*38VulnerableFedoraproject
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*11.0VulnerableDebian
  • cpe:2.3:a:isc:bind:9.11.5:s5:*:*:supported_preview:*:*:* Versions 9.11.5 s5 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.5:s6:*:*:supported_preview:*:*:* Versions 9.11.5 s6 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:* Versions 9.11.6 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:* Versions 9.11.7 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.8:s1:*:*:supported_preview:*:*:* Versions 9.11.8 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.12:s1:*:*:supported_preview:*:*:* Versions 9.11.12 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.21:s1:*:*:supported_preview:*:*:* Versions 9.11.21 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.27:s1:*:*:supported_preview:*:*:* Versions 9.11.27 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.29:s1:*:*:supported_preview:*:*:* Versions 9.11.29 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.35:s1:*:*:supported_preview:*:*:* Versions 9.11.35 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.11.37:s1:*:*:supported_preview:*:*:* Versions 9.11.37 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.16.8:s1:*:*:supported_preview:*:*:* Versions 9.16.8 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.16.11:s1:*:*:supported_preview:*:*:* Versions 9.16.11 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.16.12:s1:*:*:supported_preview:*:*:* Versions 9.16.12 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.16.13:s1:*:*:supported_preview:*:*:* Versions 9.16.13 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.16.14:s1:*:*:supported_preview:*:*:* Versions 9.16.14 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.16.21:s1:*:*:supported_preview:*:*:* Versions 9.16.21 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.16.32:s1:*:*:supported_preview:*:*:* Versions 9.16.32 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.16.36:s1:*:*:supported_preview:*:*:* Versions 9.16.36 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.16.43:s1:*:*:supported_preview:*:*:* Versions 9.16.43 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.18.0:s1:*:*:supported_preview:*:*:* Versions 9.18.0 s1 Vulnerable ·ISC
  • cpe:2.3:a:isc:bind:9.18.18:s1:*:*:supported_preview:*:*:* Versions 9.18.18 s1 Vulnerable ·ISC
  • cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* Versions 37 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* Versions 38 Vulnerable ·Fedoraproject
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian

Remediation

Red Hat 11 advisories

  • RHSA-2025:0039 Released 2025-01-06 · Red Hat rating Important
    bind and bind-dyndb-ldap security update
    • Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) bind-32:9.8.2-0.68.rc1.el6_10.14, bind-chroot-32:9.8.2-0.68.rc1.el6_10.14, bind-dyndb-ldap-2.3-8.el6_10.1 +2
    • Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION) bind-devel-32:9.8.2-0.68.rc1.el6_10.14, bind-sdb-32:9.8.2-0.68.rc1.el6_10.14
  • RHSA-2023:5771 Released 2023-10-17 · Red Hat rating Important
    bind9.16 security update
    • Red Hat CodeReady Linux Builder EUS (v.8.6) bind9.16-devel-32:9.16.23-0.7.el8_6.3, bind9.16-dnssec-utils-32:9.16.23-0.7.el8_6.3, bind9.16-doc-32:9.16.23-0.7.el8_6.3 +2
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) bind9.16-32:9.16.23-0.7.el8_6.3, bind9.16-chroot-32:9.16.23-0.7.el8_6.3, bind9.16-libs-32:9.16.23-0.7.el8_6.3 +2
  • RHSA-2023:5691 Released 2023-10-12 · Red Hat rating Important
    bind security update
    • Red Hat Enterprise Linux Client (v. 7) bind-32:9.11.4-26.P2.el7_9.15, bind-export-libs-32:9.11.4-26.P2.el7_9.15, bind-libs-32:9.11.4-26.P2.el7_9.15 +3
    • Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.11.4-26.P2.el7_9.15, bind-chroot-32:9.11.4-26.P2.el7_9.15, bind-devel-32:9.11.4-26.P2.el7_9.15 +8
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.11.4-26.P2.el7_9.15, bind-chroot-32:9.11.4-26.P2.el7_9.15, bind-devel-32:9.11.4-26.P2.el7_9.15 +8
    • Red Hat Enterprise Linux Server (v. 7) bind-32:9.11.4-26.P2.el7_9.15, bind-chroot-32:9.11.4-26.P2.el7_9.15, bind-export-libs-32:9.11.4-26.P2.el7_9.15 +11
    • Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.11.4-26.P2.el7_9.15, bind-devel-32:9.11.4-26.P2.el7_9.15.ppc, bind-export-devel-32:9.11.4-26.P2.el7_9.15 +7
    • Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.11.4-26.P2.el7_9.15, bind-chroot-32:9.11.4-26.P2.el7_9.15, bind-export-libs-32:9.11.4-26.P2.el7_9.15 +7
    • Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.11.4-26.P2.el7_9.15, bind-export-devel-32:9.11.4-26.P2.el7_9.15, bind-lite-devel-32:9.11.4-26.P2.el7_9.15 +3
Show 8 more Red Hat advisories
  • RHSA-2023:5689 Released 2023-10-12 · Red Hat rating Important
    bind security update
    • Red Hat Enterprise Linux AppStream (v. 9) bind-32:9.16.23-11.el9_2.2, bind-chroot-32:9.16.23-11.el9_2.2, bind-dnssec-doc-32:9.16.23-11.el9_2.2 +5
    • Red Hat Enterprise Linux CRB (v. 9) bind-devel-32:9.16.23-11.el9_2.2, bind-doc-32:9.16.23-11.el9_2.2, bind-libs-32:9.16.23-11.el9_2.2
  • RHSA-2023:5690 Released 2023-10-12 · Red Hat rating Important
    bind security update
    • Red Hat CodeReady Linux Builder EUS (v.9.0) bind-devel-32:9.16.23-1.el9_0.3, bind-libs-32:9.16.23-1.el9_0.3
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) bind-32:9.16.23-1.el9_0.3, bind-chroot-32:9.16.23-1.el9_0.3, bind-dnssec-doc-32:9.16.23-1.el9_0.3 +5
  • RHSA-2023:5526 Released 2023-10-09 · Red Hat rating Important
    bind security update
    • Red Hat Enterprise Linux AppStream E4S (v. 8.1) bind-32:9.11.4-26.P2.el8_1.8, bind-chroot-32:9.11.4-26.P2.el8_1.8, bind-devel-32:9.11.4-26.P2.el8_1.8 +12
    • Red Hat Enterprise Linux BaseOS E4S (v. 8.1) bind-32:9.11.4-26.P2.el8_1.8, bind-export-devel-32:9.11.4-26.P2.el8_1.8, bind-export-libs-32:9.11.4-26.P2.el8_1.8
  • RHSA-2023:5527 Released 2023-10-09 · Red Hat rating Important
    bind security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) bind-32:9.11.13-6.el8_2.6, bind-chroot-32:9.11.13-6.el8_2.6, bind-devel-32:9.11.13-6.el8_2.6 +12
    • Red Hat Enterprise Linux AppStream E4S (v. 8.2) bind-32:9.11.13-6.el8_2.6, bind-chroot-32:9.11.13-6.el8_2.6, bind-devel-32:9.11.13-6.el8_2.6 +12
    • Red Hat Enterprise Linux AppStream TUS (v. 8.2) bind-32:9.11.13-6.el8_2.6, bind-chroot-32:9.11.13-6.el8_2.6, bind-devel-32:9.11.13-6.el8_2.6 +12
    • Red Hat Enterprise Linux BaseOS AUS (v. 8.2) bind-32:9.11.13-6.el8_2.6, bind-export-devel-32:9.11.13-6.el8_2.6, bind-export-libs-32:9.11.13-6.el8_2.6
    • Red Hat Enterprise Linux BaseOS E4S (v. 8.2) bind-32:9.11.13-6.el8_2.6, bind-export-devel-32:9.11.13-6.el8_2.6, bind-export-libs-32:9.11.13-6.el8_2.6
    • Red Hat Enterprise Linux BaseOS TUS (v. 8.2) bind-32:9.11.13-6.el8_2.6, bind-export-devel-32:9.11.13-6.el8_2.6, bind-export-libs-32:9.11.13-6.el8_2.6
  • RHSA-2023:5529 Released 2023-10-09 · Red Hat rating Important
    bind security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) bind-32:9.11.26-4.el8_4.3, bind-chroot-32:9.11.26-4.el8_4.3, bind-devel-32:9.11.26-4.el8_4.3 +12
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) bind-32:9.11.26-4.el8_4.3, bind-chroot-32:9.11.26-4.el8_4.3, bind-devel-32:9.11.26-4.el8_4.3 +12
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) bind-32:9.11.26-4.el8_4.3, bind-chroot-32:9.11.26-4.el8_4.3, bind-devel-32:9.11.26-4.el8_4.3 +12
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) bind-32:9.11.26-4.el8_4.3, bind-export-devel-32:9.11.26-4.el8_4.3, bind-export-libs-32:9.11.26-4.el8_4.3
    • Red Hat Enterprise Linux BaseOS E4S (v.8.4) bind-32:9.11.26-4.el8_4.3, bind-export-devel-32:9.11.26-4.el8_4.3, bind-export-libs-32:9.11.26-4.el8_4.3
    • Red Hat Enterprise Linux BaseOS TUS (v.8.4) bind-32:9.11.26-4.el8_4.3, bind-export-devel-32:9.11.26-4.el8_4.3, bind-export-libs-32:9.11.26-4.el8_4.3
  • RHSA-2023:5474 Released 2023-10-05 · Red Hat rating Important
    bind security update
    • Red Hat Enterprise Linux AppStream (v. 8) bind-32:9.11.36-8.el8_8.2, bind-chroot-32:9.11.36-8.el8_8.2, bind-devel-32:9.11.36-8.el8_8.2 +12
    • Red Hat Enterprise Linux BaseOS (v. 8) bind-32:9.11.36-8.el8_8.2, bind-export-devel-32:9.11.36-8.el8_8.2, bind-export-libs-32:9.11.36-8.el8_8.2
  • RHSA-2023:5473 Released 2023-10-05 · Red Hat rating Important
    bind security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) bind-32:9.11.36-3.el8_6.5, bind-chroot-32:9.11.36-3.el8_6.5, bind-devel-32:9.11.36-3.el8_6.5 +12
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) bind-32:9.11.36-3.el8_6.5, bind-export-devel-32:9.11.36-3.el8_6.5, bind-export-libs-32:9.11.36-3.el8_6.5
  • RHSA-2023:5460 Released 2023-10-05 · Red Hat rating Important
    bind9.16 security update
    • Red Hat Enterprise Linux AppStream (v. 8) bind9.16-32:9.16.23-0.14.el8_8.2, bind9.16-chroot-32:9.16.23-0.14.el8_8.2, bind9.16-dnssec-utils-32:9.16.23-0.14.el8_8.2 +4
    • Red Hat Enterprise Linux CRB (v. 8) bind9.16-devel-32:9.16.23-0.14.el8_8.2, bind9.16-doc-32:9.16.23-0.14.el8_8.2, bind9.16-libs-32:9.16.23-0.14.el8_8.2

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat CodeReady Linux Builder EUS (v.8.6)Fixed RHSA-2023:5771
Red Hat CodeReady Linux Builder EUS (v.9.0)Fixed RHSA-2023:5690
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2023:5460, RHSA-2023:5474
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2023:5689
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2023:5527
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2023:5529
Red Hat Enterprise Linux AppStream E4S (v. 8.1)Fixed RHSA-2023:5526
Red Hat Enterprise Linux AppStream E4S (v. 8.2)Fixed RHSA-2023:5527
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2023:5529
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2023:5473, RHSA-2023:5771
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2023:5690
Red Hat Enterprise Linux AppStream TUS (v. 8.2)Fixed RHSA-2023:5527
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2023:5529
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2023:5474
Red Hat Enterprise Linux BaseOS AUS (v. 8.2)Fixed RHSA-2023:5527
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2023:5529
Red Hat Enterprise Linux BaseOS E4S (v. 8.1)Fixed RHSA-2023:5526
Red Hat Enterprise Linux BaseOS E4S (v. 8.2)Fixed RHSA-2023:5527
Red Hat Enterprise Linux BaseOS E4S (v.8.4)Fixed RHSA-2023:5529
Red Hat Enterprise Linux BaseOS EUS (v.8.6)Fixed RHSA-2023:5473
Red Hat Enterprise Linux BaseOS TUS (v. 8.2)Fixed RHSA-2023:5527
Red Hat Enterprise Linux BaseOS TUS (v.8.4)Fixed RHSA-2023:5529
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2023:5460
Red Hat Enterprise Linux CRB (v. 9)Fixed RHSA-2023:5689
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2023:5691
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2023:5691
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2023:5691
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2023:5691
Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)Fixed RHSA-2025:0039
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2023:5691
Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)Fixed RHSA-2025:0039
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2023:5691
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2023:5691

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-3341
  2. 2026-10-03 Alias added: GHSA-w5c6-c6wv-54h7

References

Patch 1

Advisory 5

Other 2

  • TI-2015-04610 Assertion failure in ISC BIND named via TKEY queries KEVCVSS 3.1HIGH 7.5
  • TI-2023-27571 Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related… CVSS 3.1HIGH 7.5
  • TI-2021-07476 A second vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attack CVSS 3.1CRITICAL 9.8
  • TI-2023-27773 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance… CVSS 3.1HIGH 7.5
  • TI-2020-06910 A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c CVSS 3.1HIGH 7.5
  • TI-2016-02320 buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x… CVSS 3.0HIGH 7.5
See all 192 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences