UpHeron
All vulnerabilities

Servers and applications

CVE-2023-2829

A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option (`synth-from-dnssec`) enabled can be remotely terminated using a zone with a malformed NSEC record. This issue affects BIND 9 versions 9.16.8-S1 through 9.16.41-S1 and 9.18.11-S1 through 9.18.15-S1.

Severity
High 7.5
Published
21 Jun 2023
Last changed
24 Oct 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
BIND 9Servers and applications · cpe:a:isc:bind
  • From 9.16.8 up to 9.16.41
  • From 9.18.11 up to 9.18.15

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-2829
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-2829