DEBIAN-CVE-2023-5517

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/DEBIAN-CVE-2023-5517
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-5517.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2023-5517
Upstream
Published
2024-02-13T14:15:45Z
Modified
2025-09-19T07:33:43.625483Z
Summary
[none]
Details

A flaw in query-handling code can cause named to exit prematurely with an assertion failure when: - nxdomain-redirect <domain>; is configured, and - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response. This issue affects BIND 9 versions 9.12.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

References

Affected packages

Debian:11 / bind9

Package

Name
bind9
Purl
pkg:deb/debian/bind9?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.16.48-1

Affected versions

1:9.*

1:9.16.15-1
1:9.16.21-1
1:9.16.21-1+hurd.1
1:9.16.22-1~deb11u1~bpo10+1
1:9.16.22-1~deb11u1
1:9.16.27-1~deb11u1~bpo10+1
1:9.16.27-1~deb11u1
1:9.16.33-1~deb11u1
1:9.16.37-1~deb11u1
1:9.16.42-1~deb11u1
1:9.16.44-1~deb11u1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / bind9

Package

Name
bind9
Purl
pkg:deb/debian/bind9?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.18.24-1

Affected versions

1:9.*

1:9.18.12-1
1:9.18.13-1
1:9.18.16-1~deb12u1~bpo11+1
1:9.18.16-1~deb12u1
1:9.18.16-1
1:9.18.19-1~deb12u1~bpo11+1
1:9.18.19-1~deb12u1
1:9.18.24-1~bpo11+1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / bind9

Package

Name
bind9
Purl
pkg:deb/debian/bind9?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.19.21-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:14 / bind9

Package

Name
bind9
Purl
pkg:deb/debian/bind9?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:9.19.21-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}