CVE-2023-5680

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-5680
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-5680.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-5680
Downstream
Related
Published
2024-02-13T14:15:45.850Z
Modified
2026-07-01T11:53:38.891493854Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
[none]
Details

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance. This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:isc:bind:9.11.12:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.21:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.27:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.29:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.35:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.37:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.3:s4:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.5:s3:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.5:s5:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.5:s6:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.11.8:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.16.11:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.16.12:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.16.13:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.16.14:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.16.21:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.16.32:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.16.36:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.16.43:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.16.8:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.18.11:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.18.18:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.18.21:s1:*:*:supported_preview:*:*:*"
            ],
            "source": "CPE_STRING",
            "extracted_events": [
                {
                    "last_affected": "9.11.3-s4"
                },
                {
                    "last_affected": "9.11.3-s4"
                },
                {
                    "last_affected": "9.11.5-s3"
                },
                {
                    "last_affected": "9.11.5-s3"
                },
                {
                    "last_affected": "9.11.5-s5"
                },
                {
                    "last_affected": "9.11.5-s5"
                },
                {
                    "last_affected": "9.11.5-s6"
                },
                {
                    "last_affected": "9.11.5-s6"
                },
                {
                    "last_affected": "9.11.7-s1"
                },
                {
                    "last_affected": "9.11.7-s1"
                },
                {
                    "last_affected": "9.11.8-s1"
                },
                {
                    "last_affected": "9.11.8-s1"
                },
                {
                    "last_affected": "9.11.12-s1"
                },
                {
                    "last_affected": "9.11.12-s1"
                },
                {
                    "last_affected": "9.11.21-s1"
                },
                {
                    "last_affected": "9.11.21-s1"
                },
                {
                    "last_affected": "9.11.27-s1"
                },
                {
                    "last_affected": "9.11.27-s1"
                },
                {
                    "last_affected": "9.11.29-s1"
                },
                {
                    "last_affected": "9.11.29-s1"
                },
                {
                    "last_affected": "9.11.35-s1"
                },
                {
                    "last_affected": "9.11.35-s1"
                },
                {
                    "last_affected": "9.11.37-s1"
                },
                {
                    "last_affected": "9.11.37-s1"
                },
                {
                    "last_affected": "9.16.8-s1"
                },
                {
                    "last_affected": "9.16.8-s1"
                },
                {
                    "last_affected": "9.16.11-s1"
                },
                {
                    "last_affected": "9.16.11-s1"
                },
                {
                    "last_affected": "9.16.12-s1"
                },
                {
                    "last_affected": "9.16.12-s1"
                },
                {
                    "last_affected": "9.16.13-s1"
                },
                {
                    "last_affected": "9.16.13-s1"
                },
                {
                    "last_affected": "9.16.14-s1"
                },
                {
                    "last_affected": "9.16.14-s1"
                },
                {
                    "last_affected": "9.16.21-s1"
                },
                {
                    "last_affected": "9.16.21-s1"
                },
                {
                    "last_affected": "9.16.32-s1"
                },
                {
                    "last_affected": "9.16.32-s1"
                },
                {
                    "last_affected": "9.16.36-s1"
                },
                {
                    "last_affected": "9.16.36-s1"
                },
                {
                    "last_affected": "9.16.43-s1"
                },
                {
                    "last_affected": "9.16.43-s1"
                },
                {
                    "last_affected": "9.18.11-s1"
                },
                {
                    "last_affected": "9.18.11-s1"
                },
                {
                    "last_affected": "9.18.18-s1"
                },
                {
                    "last_affected": "9.18.18-s1"
                },
                {
                    "last_affected": "9.18.21-s1"
                },
                {
                    "last_affected": "9.18.21-s1"
                }
            ],
            "vendor_product": "isc:bind"
        }
    ]
}
References

Affected packages

Git / github.com/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://github.com/isc-projects/bind9
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
617639b7cc40ba9eb6fde2d98099726d50da812e
Last affected
2b060b2cc30fd7d92b805751fa6c7f72fd000f23
Last affected
eba38b89007f65bc6c1fdd2451034bbe3908b9a4
Database specific 
{
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.11.3-s1"
        },
        {
            "last_affected": "9.11.4-s1"
        },
        {
            "last_affected": "9.11.6-s1"
        }
    ],
    "cpe": [
        "cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.4:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*"
    ]
}

Affected versions

v9.*
v9.10.0a1
v9.10.0a2
v9.10.0b1
v9.10.0b2
v9.10.0rc1
v9.11.0
v9.11.0a1
v9.11.0a2
v9.11.0a3
v9.11.0b1
v9.11.0b2
v9.11.0b3
v9.11.0rc1
v9.11.0rc2
v9.11.0rc3
v9.11.1
v9.11.1b1
v9.11.1rc1
v9.11.1rc2
v9.11.1rc3
v9.11.2b1
v9.11.2rc1
v9.11.3b1
v9.11.3rc1
v9.11.4
v9.11.4-P1
v9.11.4rc2
v9.11.6
v9.11.6-P1
v9.11.6rc1
v9.5.0a1
v9.5.0a2
v9.5.0a3
v9.5.0a4
v9.5.0a5
v9.5.0a6
v9.7.0a1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-5680.json"

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
617639b7cc40ba9eb6fde2d98099726d50da812e
Last affected
2b060b2cc30fd7d92b805751fa6c7f72fd000f23
Last affected
eba38b89007f65bc6c1fdd2451034bbe3908b9a4
Database specific 
{
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.11.3-s1"
        },
        {
            "last_affected": "9.11.4-s1"
        },
        {
            "last_affected": "9.11.6-s1"
        }
    ],
    "cpe": [
        "cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.4:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*"
    ]
}

Affected versions

v9.*
v9.10.0a1
v9.10.0a2
v9.10.0b1
v9.10.0b2
v9.10.0rc1
v9.11.0
v9.11.0a1
v9.11.0a2
v9.11.0a3
v9.11.0b1
v9.11.0b2
v9.11.0b3
v9.11.0rc1
v9.11.0rc2
v9.11.0rc3
v9.11.1
v9.11.1b1
v9.11.1rc1
v9.11.1rc2
v9.11.1rc3
v9.11.2b1
v9.11.2rc1
v9.11.3b1
v9.11.3rc1
v9.11.4
v9.11.4-P1
v9.11.4rc2
v9.11.6
v9.11.6-P1
v9.11.6rc1
v9.5.0a1
v9.5.0a2
v9.5.0a3
v9.5.0a4
v9.5.0a5
v9.5.0a6
v9.7.0a1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-5680.json"