Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-5680

Cleaning an ECS-enabled cache may cause excessive CPU load

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
isc

Description

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance. This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ISC BIND 9

Default version status: unaffected

  • 9.11.3-S1 to ≤ 9.11.37-S1affected
  • 9.16.8-S1 to ≤ 9.16.45-S1affected
  • 9.18.11-S1 to ≤ 9.18.21-S1affected

References