https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3341 ISC BIND is vulnerable to a denial of service, caused by a stack exhaustion flaw in control channel code. By sending a specially crafted message over the control channel, a remote attacker could exploit this vulnerability to cause named to terminate.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3726 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3726-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                    Thorsten Alteholz     January 30, 2024                              https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : bind9     Version        : 1:9.11.5.P4+dfsg-5.1+deb10u10     CVE ID         : CVE-2023-3341


    An issue has been discovered in BIND, a DNS server implementation.

    A stack exhaustion flaw was discovered in the control channel code     which may result in denial of service (named daemon crash).


    For Debian 10 buster, this problem has been fixed in version     1:9.11.5.P4+dfsg-5.1+deb10u10.

    We recommend that you upgrade your bind9 packages.

    For the detailed security status of bind9 please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/bind9

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - The code that processes control channel messages sent to `named` calls certain functions recursively     during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on     the environment, this may cause the packet-parsing code to run out of available stack memory, causing     `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its     contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key;
    only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9     versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through     9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1. (CVE-2023-3341)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-687525fcca advisory.

    # BIND 9.18.19

    ##Security Fixes

    -    Previously, sending a specially crafted message over the control channel could cause the packet-     parsing code to run out of available stack memory, causing named to terminate unexpectedly. This has been     fixed. ([CVE-2023-3341](https://access.redhat.com/security/cve/CVE-2023-3341))
    -    A flaw in the networking code handling DNS-over-TLS queries could cause named to terminate     unexpectedly due to an assertion failure under significant DNS-over-TLS query load. This has been fixed.
    ([CVE-2023-4236](https://access.redhat.com/security/cve/CVE-2023-4236))
    - [Upstream release notes](https://downloads.isc.org/isc/bind9/9.18.19/doc/arm/html/notes.html#notes-for-     bind-9-18-19)




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has bind packages installed that are affected by multiple vulnerabilities:

  - If a server hosts a zone containing a KEY Resource Record, or a resolver DNSSEC-validates a KEY     Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by     sending a stream of SIG(0) signed requests. This issue affects BIND 9 versions 9.0.0 through 9.11.37,     9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.9.3-S1 through 9.11.37-S1,     9.16.8-S1 through 9.16.49-S1, and 9.18.11-S1 through 9.18.27-S1. (CVE-2024-1975)

  - The code that processes control channel messages sent to `named` calls certain functions recursively     during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on     the environment, this may cause the packet-parsing code to run out of available stack memory, causing     `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its     contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key;
    only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9     versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through     9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1. (CVE-2023-3341)

  - A flaw in the networking code handling DNS-over-TLS queries may cause `named` to terminate unexpectedly     due to an assertion failure. This happens when internal data structures are incorrectly reused under     significant DNS-over-TLS query load. This issue affects BIND 9 versions 9.18.0 through 9.18.18 and     9.18.11-S1 through 9.18.18-S1. (CVE-2023-4236)

  - Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same     hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and     also when handling client queries for this name. This issue affects BIND 9 versions 9.11.0 through     9.11.37, 9.16.0 through 9.16.50, 9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.4-S1 through     9.11.37-S1, 9.16.8-S1 through 9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1. (CVE-2024-1737)

  - Client queries that trigger serving stale data and that also require lookups in local authoritative zone     data may result in an assertion failure. This issue affects BIND 9 versions 9.16.13 through 9.16.50,     9.18.0 through 9.18.27, 9.19.0 through 9.19.24, 9.11.33-S1 through 9.11.37-S1, 9.16.13-S1 through     9.16.50-S1, and 9.18.11-S1 through 9.18.27-S1. (CVE-2024-4076)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6502:11 advisory.

    * bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6475:09 advisory.

    * bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6494:03 advisory.

    * bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6499:10 advisory.

    * bind: stack exhaustion in control channel code may lead to DoS (CVE-2023-3341)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
187171	AIX 7.2 TL 5 : bind (IJ49093)	Nessus	AIX Local Security Checks	2023/12/21	2024/1/12	high
189836	Debian dla-3726 : bind9 - security update	Nessus	Debian Local Security Checks	2024/1/31	2025/1/22	high
190244	EulerOS 2.0 SP5 : bind (EulerOS-SA-2024-1132)	Nessus	Huawei Local Security Checks	2024/2/8	2024/2/8	high
194665	Fedora 40 : bind / bind-dyndb-ldap (2023-687525fcca)	Nessus	Fedora Local Security Checks	2024/4/29	2024/11/14	high
242699	NewStart CGSL MAIN 7.02 : bind Multiple Vulnerabilities (NS-SA-2025-0108)	Nessus	NewStart CGSL Local Security Checks	2025/7/25	2025/7/25	high
292262	MiracleLinux 9 : bind-9.16.23-11.el9.2 (AXSA:2023-6502:11)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
293047	MiracleLinux 8 : bind-9.11.36-8.el8.2 (AXSA:2023-6475:09)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
293705	MiracleLinux 8 : bind9.16-9.16.23-0.14.el8.2.ML.1 (AXSA:2023-6494:03)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high
293751	MiracleLinux 7 : bind-9.11.4-26.P2.15.0.1.el7.AXS7 (AXSA:2023-6499:10)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	high

检测

插件搜索

high

high

high

high

high

high

high

high

high