CVE-2023-5680

Public on 2024-02-13

Modified on 2024-02-15

Description

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance.
This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

Severity

Medium

CVSS v3 Base Score

5.3

See breakdown

Affected Packages

Platform	Package	Status
HAQM Linux 1	bind	Not Affected
HAQM Linux 2 - Core	bind	Not Affected
HAQM Linux 2023	bind	Not Affected

CVSS Scores

	Score Type	Score	Vector
HAQM Linux	CVSSv3	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NVD	CVSSv3	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References

Red Hat: CVE-2023-5680 Mitre: CVE-2023-5680