{"id":"CVE-2023-5679","aliases":["ALPINE-CVE-2023-5679","ALSA-2024:1781","ALSA-2024:1789","ALSA-2024:2551","AZL-34351","AZL-34564","BELL-CVE-2023-5679","CLSA-2025-1739386415","DEBIAN-CVE-2023-5679","DSA-5621-1","EUVD-2023-57970","GHSA-v5qp-mx94-j49v","MGASA-2024-0038","OESA-2024-1323","OESA-2024-1324","OESA-2024-1325","OESA-2024-1326","RHSA-2024:1647","RHSA-2024:1648","RHSA-2024:1781","RHSA-2024:1789","RHSA-2024:1800","RHSA-2024:1803","RHSA-2024:2551","RLSA-2024:1781","RLSA-2024:2551","SUSE-SU-2024:0574-1","SUSE-SU-2024:0590-1","UBUNTU-CVE-2023-5679","USN-6633-1","openSUSE-SU-2024:13687-1"],"status":"published","title":"Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution","description":"A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.\nThis issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01276,"percentile":0.70154,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-617"],"published":"2024-02-13T00:00:00Z","modified":"2026-10-29T11:31:43Z","fixes":[{"ecosystem":"Alpine:v3.16","package":"bind","fixed_in":["9.16.48-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"bind","fixed_in":["9.18.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"bind","fixed_in":["9.18.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"bind","fixed_in":["9.18.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"bind","fixed_in":["9.18.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"bind","fixed_in":["9.18.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"bind","fixed_in":["9.18.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"bind","fixed_in":["9.18.24-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"bind","fixed_in":["9.18.24-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"bind","fixed_in":["9.16.48-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"bind","fixed_in":["9.19.21-1"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"bind","fixed_in":["9.18.24-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"bind","fixed_in":["9.18.24-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"bind9","fixed_in":["1:9.18.24-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bind9","fixed_in":["1:9.19.21-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bind9","fixed_in":["1:9.19.21-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"bind9","fixed_in":["1:9.18.18-0ubuntu0.22.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.16","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.12"},{"fixed":"9.16.48-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.12"},{"fixed":"9.18.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.12"},{"fixed":"9.18.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.12"},{"fixed":"9.18.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.12"},{"fixed":"9.18.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.12"},{"fixed":"9.18.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.12"},{"fixed":"9.18.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.12"},{"fixed":"9.18.24-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.12"},{"fixed":"9.18.24-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.9-8.el9_3.3.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.9-9.el9_4.alma.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Azure Linux:2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.48-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.19.21-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.18.11-r0"},{"fixed":"9.18.24-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.18.16-r0"},{"fixed":"9.18.24-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.2.tuxcare.els5"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.24-1"}]}],"versions":["1:9.18.12-1","1:9.18.13-1","1:9.18.16-1","1:9.18.16-1~deb12u1","1:9.18.16-1~deb12u1~bpo11+1","1:9.18.19-1~deb12u1","1:9.18.19-1~deb12u1~bpo11+1","1:9.18.24-1~bpo11+1"]},{"source":"osv","ecosystem":"Debian:13","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.19.21-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.19.21-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.16.48-1"}]}],"versions":["1:9.16.15-1","1:9.16.21-1","1:9.16.21-1+hurd.1","1:9.16.22-1~deb11u1","1:9.16.22-1~deb11u1~bpo10+1","1:9.16.27-1~deb11u1","1:9.16.27-1~deb11u1~bpo10+1","1:9.16.33-1~deb11u1","1:9.16.37-1~deb11u1","1:9.16.42-1~deb11u1","1:9.16.44-1~deb11u1"],"bundled":5},{"source":"osv","ecosystem":"Debian:12","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.24-1"}]}],"versions":["1:9.18.12-1","1:9.18.13-1","1:9.18.16-1","1:9.18.16-1~deb12u1","1:9.18.16-1~deb12u1~bpo11+1","1:9.18.19-1~deb12u1","1:9.18.19-1~deb12u1~bpo11+1","1:9.18.24-1~bpo11+1"],"bundled":5},{"source":"osv","ecosystem":"Mageia:9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.15-2.3.mga9"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.23-21.oe2203"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.23-21.oe2203sp1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.23-22.oe2203sp2"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.23-22.oe2203sp3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"bind9.16-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"bind9.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"bind9.16-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"bind9.16-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"bind9.16-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"bind9.16-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"bind9.16-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::appstream","package":"bind9.16-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"bind9.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"bind9.16-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"bind9.16-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"bind9.16-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"bind9.16-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"bind9.16-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"bind9.16-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"bind9.16-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.6::crb","package":"python3-bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"bind9.16-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"bind9.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"bind9.16-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"bind9.16-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"bind9.16-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"bind9.16-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"bind9.16-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"bind9.16-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"bind9.16-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::appstream","package":"python3-bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"bind9.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"bind9.16-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"bind9.16-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"bind9.16-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"bind9.16-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"bind9.16-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"bind9.16-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.14.el8_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python3-bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.9-8.el9_3.3"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dyndb-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.9-8.el9_3.3"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dyndb-ldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.9-8.el9_3.3"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-14.el9_3.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.9-7.el9_0.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"bind-dyndb-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.9-7.el9_0.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"bind-dyndb-ldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.9-7.el9_0.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::appstream","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.0::crb","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.9-8.el9_2.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"bind-dyndb-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.9-8.el9_2.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"bind-dyndb-ldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.9-8.el9_2.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-11.el9_2.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.9-9.el9_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dyndb-ldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.9-9.el9_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dyndb-ldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.9-9.el9_4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.16.23-0.16.el8_9.2"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.16.23-18.el9_4.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:9","package":"bind-dyndb-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:11.9-9.el9_4"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.48-150500.8.16.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.48-150500.8.16.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.48-150500.8.16.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.48-150400.5.40.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.48-150400.5.40.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.48-150400.5.40.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.48-150400.5.40.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.48-150400.5.40.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.48-150400.5.40.1"}]}],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.18-0ubuntu0.22.04.2"}]}],"versions":["1:9.16.15-1ubuntu1","1:9.16.15-1ubuntu2","1:9.16.15-1ubuntu3","1:9.18.0-2ubuntu1","1:9.18.0-2ubuntu2","1:9.18.0-2ubuntu3","1:9.18.1-1ubuntu1","1:9.18.1-1ubuntu1.1","1:9.18.1-1ubuntu1.2","1:9.18.1-1ubuntu1.3","1:9.18.12-0ubuntu0.22.04.1","1:9.18.12-0ubuntu0.22.04.2","1:9.18.12-0ubuntu0.22.04.3","1:9.18.18-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.18-0ubuntu0.22.04.2"}]}],"versions":["1:9.16.15-1ubuntu1","1:9.16.15-1ubuntu2","1:9.16.15-1ubuntu3","1:9.18.0-2ubuntu1","1:9.18.0-2ubuntu2","1:9.18.0-2ubuntu3","1:9.18.1-1ubuntu1","1:9.18.1-1ubuntu1.1","1:9.18.1-1ubuntu1.2","1:9.18.1-1ubuntu1.3","1:9.18.12-0ubuntu0.22.04.1","1:9.18.12-0ubuntu0.22.04.2","1:9.18.12-0ubuntu0.22.04.3","1:9.18.18-0ubuntu0.22.04.1"],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.24-1.1"}]}],"bundled":6}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"isc","product":"bind"},{"vendor":"isc","product":"bind 9"},{"vendor":"netapp","product":"active_iq_unified_manager"}],"references":[{"url":"https://kb.isc.org/docs/cve-2023-5679","tags":["vendor-advisory","x_transferred","Vendor Advisory","advisory","web","article","report"]},{"url":"http://www.openwall.com/lists/oss-security/2024/02/13/1","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/","tags":["x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240426-0002/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5679","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R"},{"url":"https://security.netapp.com/advisory/ntap-20240426-0002"},{"url":"https://github.com/advisories/GHSA-v5qp-mx94-j49v"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-5679","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1781","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4408","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50387","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-50868","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5517","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5679","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-6516","tags":["report"]},{"url":"https://bugzilla.redhat.com/2263896","tags":["report"]},{"url":"https://bugzilla.redhat.com/2263897","tags":["report"]},{"url":"https://bugzilla.redhat.com/2263909","tags":["report"]},{"url":"https://bugzilla.redhat.com/2263911","tags":["report"]},{"url":"https://bugzilla.redhat.com/2263914","tags":["report"]},{"url":"https://bugzilla.redhat.com/2263917","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-1781.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1789","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-1789.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2551","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2551.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-5679","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/advisories/BELL-SA-2024-16","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2025-1739386415.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-5679","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0038.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32846","tags":["report"]},{"url":"https://kb.isc.org/docs/cve-2023-4408","tags":["web","article"]},{"url":"https://kb.isc.org/docs/cve-2023-5517","tags":["web","article"]},{"url":"https://kb.isc.org/docs/cve-2023-50387","tags":["web","article"]},{"url":"https://kb.isc.org/docs/cve-2023-50868","tags":["web","article"]},{"url":"https://downloads.isc.org/isc/bind9/9.18.24/doc/arm/html/notes.html#notes-for-bind-9-18-24","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4408","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50387","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5517","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-6516","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1324","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1325","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1326","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1647","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263914","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263917","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1647.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4408","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5517","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5679","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-6516","tags":["advisory"]},{"url":"https://kb.isc.org/docs/cve-2023-6516","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50387","tags":["advisory"]},{"url":"https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released","tags":["article"]},{"url":"https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-50868","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50868","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1648","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1648.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1781.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1789.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1800","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1800.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1803","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1803.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2551.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:1781","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2551","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240574-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1219823","tags":["report"]},{"url":"https://bugzilla.suse.com/1219826","tags":["report"]},{"url":"https://bugzilla.suse.com/1219851","tags":["report"]},{"url":"https://bugzilla.suse.com/1219852","tags":["report"]},{"url":"https://bugzilla.suse.com/1219853","tags":["report"]},{"url":"https://bugzilla.suse.com/1219854","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-4408","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-50868","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5517","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5679","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-6516","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240590-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-5679","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6633-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-4408","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-5517","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-50387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-50868","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-5679","title":"Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution","description":"A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.\nThis issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.","status":"published","published":"2024-02-13T14:05:06.688Z","modified":"2025-03-28T23:51:12.042Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:35:17.149492Z"}],"euvd":[{"id":"EUVD-2023-57970","description":"A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.\nThis issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.","status":"published","published":"2024-02-13T14:05:06Z","modified":"2025-03-28T23:51:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:47.247959Z"}],"ghsa":[{"id":"GHSA-v5qp-mx94-j49v","title":"A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion...","description":"A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.\nThis issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.","status":"published","published":"2024-02-13T15:31:12Z","modified":"2025-03-29T00:31:29Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T15:00:31.530223Z"}],"nvd":[{"id":"CVE-2023-5679","description":"A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.\nThis issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.","status":"published","published":"2024-02-13T14:15:45.677Z","modified":"2026-06-17T06:49:03.91Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-617"],"updated_at":"2026-11-02T14:09:04.527564Z"}],"osv":[{"id":"ALPINE-CVE-2023-5679","description":"A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.\nThis issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.","status":"published","published":"2024-02-13T14:15:45.677Z","modified":"2026-10-26T17:17:58.666409265Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"BELL-CVE-2023-5679","status":"published","published":"2024-02-14T05:57:11.624869Z","modified":"2026-01-26T09:34:39.173442Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:19.288949Z"},{"id":"CVE-2023-5679","description":"A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.\nThis issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.","status":"published","published":"2024-02-13T14:15:45.677Z","modified":"2026-10-24T10:30:37.651447222Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:36.851042Z"},{"id":"DEBIAN-CVE-2023-5679","description":"A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled. This issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.","status":"published","published":"2024-02-13T14:15:45.677Z","modified":"2026-10-26T18:03:02.103651456Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:41.533064Z"},{"id":"OESA-2024-1323","title":"bind security update","description":"Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.\r\n\r\nSecurity Fix(es):\r\n\r\nThe DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` instance by exploiting this flaw. This issue affects both authoritative servers and recursive resolvers.\nThis issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.(CVE-2023-4408)\r\n\r\nCertain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \u0026quot;KeyTrap\u0026quot; issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.(CVE-2023-50387)\r\n\r\nA flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when:\r\n\r\n  - `nxdomain-redirect \u0026lt;domain\u0026gt;;` is configured, and\n  - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response.\nThis issue affects BIND 9 versions 9.12.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.(CVE-2023-5517)\r\n\r\nA bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.\nThis issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.(CVE-2023-5679)\r\n\r\nTo keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asynchronous: a small chunk of memory pointing to the cache element that can be cleaned up is first allocated and then queued for later processing. It was discovered that if the resolver is continuously processing query patterns triggering this type of cache-database maintenance, `named` may not be able to handle the cleanup events in a timely manner. This in turn enables the list of queued cleanup events to grow infinitely large over time, allowing the configured `max-cache-size` limit to be significantly exceeded.\nThis issue affects BIND 9 versions 9.16.0 through 9.16.45 and 9.16.8-S1 through 9.16.45-S1.(CVE-2023-6516)","status":"published","published":"2024-03-22T11:06:46Z","modified":"2026-08-18T01:18:19.487463324Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1324","title":"bind security update","description":"Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.\r\n\r\nSecurity Fix(es):\r\n\r\nThe DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` instance by exploiting this flaw. This issue affects both authoritative servers and recursive resolvers.\nThis issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.(CVE-2023-4408)\r\n\r\nCertain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \u0026quot;KeyTrap\u0026quot; issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.(CVE-2023-50387)\r\n\r\nA flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when:\r\n\r\n  - `nxdomain-redirect \u0026lt;domain\u0026gt;;` is configured, and\n  - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response.\nThis issue affects BIND 9 versions 9.12.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.(CVE-2023-5517)\r\n\r\nA bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.\nThis issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.(CVE-2023-5679)\r\n\r\nTo keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asynchronous: a small chunk of memory pointing to the cache element that can be cleaned up is first allocated and then queued for later processing. It was discovered that if the resolver is continuously processing query patterns triggering this type of cache-database maintenance, `named` may not be able to handle the cleanup events in a timely manner. This in turn enables the list of queued cleanup events to grow infinitely large over time, allowing the configured `max-cache-size` limit to be significantly exceeded.\nThis issue affects BIND 9 versions 9.16.0 through 9.16.45 and 9.16.8-S1 through 9.16.45-S1.(CVE-2023-6516)","status":"published","published":"2024-03-22T11:06:46Z","modified":"2026-08-18T01:18:19.037633109Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1325","title":"bind security update","description":"Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.\r\n\r\nSecurity Fix(es):\r\n\r\nThe DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` instance by exploiting this flaw. This issue affects both authoritative servers and recursive resolvers.\nThis issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.(CVE-2023-4408)\r\n\r\nCertain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \u0026quot;KeyTrap\u0026quot; issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.(CVE-2023-50387)\r\n\r\nA flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when:\r\n\r\n  - `nxdomain-redirect \u0026lt;domain\u0026gt;;` is configured, and\n  - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response.\nThis issue affects BIND 9 versions 9.12.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.(CVE-2023-5517)\r\n\r\nA bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.\nThis issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.(CVE-2023-5679)\r\n\r\nTo keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asynchronous: a small chunk of memory pointing to the cache element that can be cleaned up is first allocated and then queued for later processing. It was discovered that if the resolver is continuously processing query patterns triggering this type of cache-database maintenance, `named` may not be able to handle the cleanup events in a timely manner. This in turn enables the list of queued cleanup events to grow infinitely large over time, allowing the configured `max-cache-size` limit to be significantly exceeded.\nThis issue affects BIND 9 versions 9.16.0 through 9.16.45 and 9.16.8-S1 through 9.16.45-S1.(CVE-2023-6516)","status":"published","published":"2024-03-22T11:06:46Z","modified":"2026-08-18T01:18:19.45917886Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1326","title":"bind security update","description":"Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols and provides an openly redistributable reference implementation of the major components of the Domain Name System. This package includes the components to operate a DNS server.\r\n\r\nSecurity Fix(es):\r\n\r\nThe DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` instance by exploiting this flaw. This issue affects both authoritative servers and recursive resolvers.\nThis issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.(CVE-2023-4408)\r\n\r\nCertain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \u0026quot;KeyTrap\u0026quot; issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.(CVE-2023-50387)\r\n\r\nA flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when:\r\n\r\n  - `nxdomain-redirect \u0026lt;domain\u0026gt;;` is configured, and\n  - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response.\nThis issue affects BIND 9 versions 9.12.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.(CVE-2023-5517)\r\n\r\nA bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.\nThis issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.(CVE-2023-5679)\r\n\r\nTo keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asynchronous: a small chunk of memory pointing to the cache element that can be cleaned up is first allocated and then queued for later processing. It was discovered that if the resolver is continuously processing query patterns triggering this type of cache-database maintenance, `named` may not be able to handle the cleanup events in a timely manner. This in turn enables the list of queued cleanup events to grow infinitely large over time, allowing the configured `max-cache-size` limit to be significantly exceeded.\nThis issue affects BIND 9 versions 9.16.0 through 9.16.45 and 9.16.8-S1 through 9.16.45-S1.(CVE-2023-6516)","status":"published","published":"2024-03-22T11:06:46Z","modified":"2026-08-18T01:18:19.8396366Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:1647","title":"Red Hat Security Advisory: bind9.16 security update","status":"published","published":"2024-09-16T17:56:51Z","modified":"2026-08-07T10:13:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1648","title":"Red Hat Security Advisory: bind9.16 security update","status":"published","published":"2024-09-16T17:56:42Z","modified":"2026-08-07T10:13:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1781","title":"Red Hat Security Advisory: bind9.16 security update","status":"published","published":"2024-09-16T17:57:00Z","modified":"2026-08-07T10:13:35Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1789","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2024-09-16T17:57:10Z","modified":"2026-08-07T10:13:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1800","title":"Red Hat Security Advisory: bind and bind-dyndb-ldap security updates","status":"published","published":"2024-09-16T17:57:39Z","modified":"2026-08-07T10:13:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:1803","title":"Red Hat Security Advisory: bind and bind-dyndb-ldap security updates","status":"published","published":"2024-09-16T17:57:30Z","modified":"2026-08-07T10:13:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:2551","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2024-09-16T17:57:48Z","modified":"2026-08-07T10:14:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"UBUNTU-CVE-2023-5679","description":"A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled. This issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.","status":"published","published":"2024-02-13T00:00:00Z","modified":"2026-04-22T14:34:13.562118Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:41.555387Z"},{"id":"ALSA-2024:1781","title":"Important: bind9.16 security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind9: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)\n* bind9: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)\n* bind9: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)\n* bind9: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)\n* bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)\n* bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-11T00:00:00Z","modified":"2026-10-29T11:02:27.884394487Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:1789","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)\n* bind: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)\n* bind: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)\n* bind: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)\n* bind: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)\n* bind: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-11T00:00:00Z","modified":"2026-10-29T11:31:07.069288207Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:2551","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)\n* bind: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)\n* bind: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)\n* bind: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)\n* bind: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)\n* bind: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)\n\nBug Fix(es):\n\n* bind-dyndb-ldap: rebuilt to adapt ABI changes in bind\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:43.243832468Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"AZL-34351","title":"CVE-2023-5679 affecting package bind for versions less than 9.16.48-1","description":"A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.\nThis issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.","status":"published","published":"2024-02-13T14:15:45Z","modified":"2026-04-21T04:27:06.637761Z","updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"AZL-34564","title":"CVE-2023-5679 affecting package bind for versions less than 9.19.21-1","description":"A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.\nThis issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.","status":"published","published":"2024-02-13T14:15:45Z","modified":"2026-04-21T04:32:28.68035Z","updated_at":"2026-11-02T15:28:03.821827Z"},{"id":"CLSA-2025-1739386415","title":"bind: Fix of 3 CVEs","description":"- CVE-2023-5517: fix a flaw causing named to crash with an assertion failure when\n nxdomain-redirect is set, and a PTR query for an RFC 1918 address returns NXDOMAIN\n- CVE-2023-5679: fix a crash in named due to an assertion failure during recursive\n  resolution when both DNS64 and serve-stale are enabled\n- CVE-2023-6516: fix a vulnerability where named may exceed max-cache-size\n  due to unbounded growth of queued cache cleanup events","status":"published","published":"2025-02-12T18:53:41Z","modified":"2026-06-01T00:30:25.95748727Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"DSA-5621-1","title":"bind9 - security update","status":"published","published":"2024-02-14T00:00:00Z","modified":"2026-03-09T02:08:49.356396Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0038","title":"Updated bind packages fix security vulnerabilities","description":"The updated packages fix security vulnerabilities:\nParsing large DNS messages may cause excessive CPU load. (CVE-2023-4408)\nQuerying RFC 1918 reverse zones may cause an assertion failure when\n\"nxdomain-redirect\" is enabled. (CVE-2023-5517)\nEnabling both DNS64 and serve-stale may cause an assertion failure\nduring recursive resolution. (CVE-2023-5679)\nKeyTrap - Extreme CPU consumption in DNSSEC validator. (CVE-2023-50387)\nPreparing an NSEC3 closest encloser proof can exhaust CPU resources.\n(CVE-2023-50868)\n","status":"published","published":"2024-02-15T18:36:07Z","modified":"2026-04-16T04:44:42.489601553Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13687-1","title":"bind-9.18.24-1.1 on GA media","description":"These are all security issues fixed in the bind-9.18.24-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:08:40.76337Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"RLSA-2024:1781","title":"Important: bind9.16 security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind9: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)\n\n* bind9: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)\n\n* bind9: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)\n\n* bind9: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)\n\n* bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)\n\n* bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-05-06T13:04:21.002456Z","modified":"2026-02-04T08:45:13.916346Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"RLSA-2024:2551","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)\n\n* bind: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)\n\n* bind: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)\n\n* bind: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)\n\n* bind: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)\n\n* bind: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)\n\nBug Fix(es):\n\n* bind-dyndb-ldap: rebuilt to adapt ABI changes in bind\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-05-10T14:32:38.11477Z","modified":"2026-02-05T13:30:14.791197Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2024:0574-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\nUpdate to release 9.16.48:\n\n- CVE-2023-50387: Fixed a denial-of-service caused by DNS messages containing a lot of DNSSEC signatures (bsc#1219823).\n- CVE-2023-50868: Fixed a denial-of-service caused by NSEC3 closest encloser proof (bsc#1219826).\n- CVE-2023-4408: Fixed a denial-of-service caused by DNS messages with many different names (bsc#1219851).\n- CVE-2023-5517: Fixed a possible crash when nxdomain-redirect was enabled (bsc#1219852).\n- CVE-2023-5679: Fixed a possible crash when bad interaction between DNS64 and serve-stale, when both of these features are enabled (bsc#1219853).\n- CVE-2023-6516: Fixed excessive memory consumption when continuously trigger the cache database maintenance (bsc#1219854).\n","status":"published","published":"2024-02-21T09:39:56Z","modified":"2026-02-04T03:03:18.025244Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0590-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\nUpdate to release 9.16.48:\n\nFeature Changes:\n* The IP addresses for B.ROOT-SERVERS.NET have been updated to\n  170.247.170.2 and 2801:1b8:10::b.\n\nSecurity Fixes:\n* Validating DNS messages containing a lot of DNSSEC signatures\n  could cause excessive CPU load, leading to a denial-of-service\n  condition. This has been fixed. (CVE-2023-50387) [bsc#1219823]\n* Preparing an NSEC3 closest encloser proof could cause excessive\n  CPU load, leading to a denial-of-service condition. This has\n  been fixed. (CVE-2023-50868) [bsc#1219826]\n* Parsing DNS messages with many different names could cause\n  excessive CPU load. This has been fixed. (CVE-2023-4408) [bsc#1219851]\n* Specific queries could cause named to crash with an assertion\n  failure when nxdomain-redirect was enabled. This has been\n  fixed. (CVE-2023-5517) [bsc#1219852]\n* A bad interaction between DNS64 and serve-stale could cause\n  named to crash with an assertion failure, when both of these\n  features were enabled. This has been fixed. (CVE-2023-5679)\n  [bsc#1219853]\n* Query patterns that continuously triggered cache database\n  maintenance could cause an excessive amount of memory to be\n  allocated, exceeding max-cache-size and potentially leading to\n  all available memory on the host running named being exhausted.\n  This has been fixed. (CVE-2023-6516) [bsc#1219854]\n\nRemoved Features:\n* Support for using AES as the DNS COOKIE algorithm\n  (cookie-algorithm aes;) has been deprecated and will be removed\n  in a future release. Please use the current default,\n  SipHash-2-4, instead.\n","status":"published","published":"2024-02-22T13:38:59Z","modified":"2026-02-04T04:23:10.61201Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"USN-6633-1","title":"bind9 vulnerabilities","description":"Shoham Danino, Anat Bremler-Barr, Yehuda Afek, and Yuval Shavitt discovered\nthat Bind incorrectly handled parsing large DNS messages. A remote attacker\ncould possibly use this issue to cause Bind to consume resources, leading\nto a denial of service. (CVE-2023-4408)\n\nElias Heftrig, Haya Schulmann, Niklas Vogel, and Michael Waidner discovered\nthat Bind icorrectly handled validating DNSSEC messages. A remote attacker\ncould possibly use this issue to cause Bind to consume resources, leading\nto a denial of service. (CVE-2023-50387)\n\nIt was discovered that Bind incorrectly handled preparing an NSEC3 closest\nencloser proof. A remote attacker could possibly use this issue to cause\nBind to consume resources, leading to a denial of service. (CVE-2023-50868)\n\nIt was discovered that Bind incorrectly handled reverse zone queries when\nnxdomain-redirect is enabled. A remote attacker could possibly use this\nissue to cause Bind to crash, leading to a denial of service.\n(CVE-2023-5517)\n\nIt was discovered that Bind incorrectly handled recursive resolution when\nboth DNS64 and serve-stable were enabled. A remote attacker could possibly\nuse this issue to cause Bind to crash, leading to a denial of service.\n(CVE-2023-5679)\n","status":"published","published":"2024-02-13T15:30:25Z","modified":"2026-04-27T17:17:23.734452059Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}