CVE-2023-2911

HIGH

MEDIUM Priority: 0.18 BB Relevance: 75/100

Published: 2023-06-21 Modified: 2026-10-24 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Network

AC: Low

PR: None

UI: None

S: Unchanged

C: None

I: None

A: High

Description

If the `recursive-clients` quota is reached on a BIND 9 resolver configured with both `stale-answer-enable yes;` and `stale-answer-client-timeout 0;`, a sequence of serve-stale-related lookups could cause `named` to loop and terminate unexpectedly due to a stack overflow. This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.

Weakness Classification (1)

CWE-787

Affected Software (16)

Vendor	Product	Version
debian	debian_linux	11.0
debian	debian_linux	12.0
debian	debian_linux	11.0
debian	debian_linux	12.0
fedoraproject	fedora	37
fedoraproject	fedora	38
isc	bind	9.16.33 – 9.16.41
isc	bind	9.16.33 – 9.16.41
isc	bind	9.18.7 – 9.18.15
isc	bind	9.18.11 – 9.18.15
netapp	active_iq_unified_manager	-
netapp	h300s_firmware	-
netapp	h410c_firmware	-
netapp	h410s_firmware	-
netapp	h500s_firmware	-
netapp	h700s_firmware	-