All vulnerabilities

Servers and applications

CVE-2023-6516

To keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asynchronous: a small chunk of memory pointing to the cache element that can be cleaned up is first allocated and then queued for later processing. It was discovered that if the resolver is continuously processing query…

Severity
High 7.5
Published
13 Feb 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
BIND 9Servers and applications · cpe:a:isc:bind
  • Version 9.16.45-s1
  • Version 9.16.43-s1
  • Version 9.16.36-s1
  • Version 9.16.32-s1
All 11 release lines
  • From 9.16.0 up to 9.16.45
  • Version 9.16.8-s1
  • Version 9.16.11-s1
  • Version 9.16.12-s1
  • Version 9.16.13-s1
  • Version 9.16.14-s1
  • Version 9.16.21-s1
  • Version 9.16.32-s1
  • Version 9.16.36-s1
  • Version 9.16.43-s1
  • Version 9.16.45-s1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-6516
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-6516