High severity7.5NVD Advisory· Published Sep 20, 2023· Updated Jun 17, 2026
CVE-2023-3341
CVE-2023-3341
Description
The code that processes control channel messages sent to named calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing named to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
91cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*+ 33 more
- cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*range: >=9.2.0,<9.16.44
- cpe:2.3:a:isc:bind:9.9.3:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.9.12:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.9.13:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.10.5:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.10.7:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.3:s4:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.4:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.5:s3:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.5:s5:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.5:s6:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.8:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.12:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.21:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.27:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.29:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.35:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.11.37:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.16.8:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.16.11:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.16.12:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.16.13:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.16.14:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.16.21:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.16.32:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.16.36:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.16.43:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.18.0:s1:*:*:supported_preview:*:*:*
- cpe:2.3:a:isc:bind:9.18.18:s1:*:*:supported_preview:*:*:*
- (no CPE)range: 9.2.0-9.16.43, 9.18.0-9.18.18, 9.19.0-9.19.16, 9.9.3-S1-9.16.43-S1, 9.18.0-S1-9.18.18-S1
- (no CPE)range: 9.2.0
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- osv-coords53 versionspkg:rpm/almalinux/bind9.16pkg:rpm/almalinux/bind9.16-chrootpkg:rpm/almalinux/bind9.16-develpkg:rpm/almalinux/bind9.16-dnssec-utilspkg:rpm/almalinux/bind9.16-docpkg:rpm/almalinux/bind9.16-libspkg:rpm/almalinux/bind9.16-licensepkg:rpm/almalinux/bind9.16-utilspkg:rpm/almalinux/python3-bind9.16pkg:rpm/almalinux/bindpkg:rpm/almalinux/bind-chrootpkg:rpm/almalinux/bind-develpkg:rpm/almalinux/bind-export-develpkg:rpm/almalinux/bind-export-libspkg:rpm/almalinux/bind-libspkg:rpm/almalinux/bind-libs-litepkg:rpm/almalinux/bind-licensepkg:rpm/almalinux/bind-lite-develpkg:rpm/almalinux/bind-pkcs11pkg:rpm/almalinux/bind-pkcs11-develpkg:rpm/almalinux/bind-pkcs11-libspkg:rpm/almalinux/bind-pkcs11-utilspkg:rpm/almalinux/bind-sdbpkg:rpm/almalinux/bind-sdb-chrootpkg:rpm/almalinux/bind-utilspkg:rpm/almalinux/python3-bindpkg:rpm/almalinux/bind-dnssec-docpkg:rpm/almalinux/bind-dnssec-utilspkg:rpm/almalinux/bind-docpkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP4pkg:rpm/suse/bind&distro=SUSE%20Enterprise%20Storage%207.1pkg:rpm/opensuse/bind&distro=openSUSE%20Tumbleweedpkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP4pkg:rpm/opensuse/bind&distro=openSUSE%20Leap%2015.4pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/bind&distro=SUSE%20Manager%20Client%20Tools%20for%20SLE%20Micro%205pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP5pkg:rpm/opensuse/bind&distro=openSUSE%20Leap%2015.5pkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOSpkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSSpkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSSpkg:rpm/suse/bind&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3pkg:rpm/suse/bind&distro=SUSE%20Manager%20Proxy%204.2pkg:rpm/suse/bind&distro=SUSE%20Manager%20Server%204.2
< 32:9.16.23-0.14.el8_8.2.alma.1+ 52 more
- (no CPE)range: < 32:9.16.23-0.14.el8_8.2.alma.1
- (no CPE)range: < 32:9.16.23-0.14.el8_8.2.alma.1
- (no CPE)range: < 32:9.16.23-0.14.el8_8.2.alma.1
- (no CPE)range: < 32:9.16.23-0.14.el8_8.2.alma.1
- (no CPE)range: < 32:9.16.23-0.14.el8_8.2.alma.1
- (no CPE)range: < 32:9.16.23-0.14.el8_8.2.alma.1
- (no CPE)range: < 32:9.16.23-0.14.el8_8.2.alma.1
- (no CPE)range: < 32:9.16.23-0.14.el8_8.2.alma.1
- (no CPE)range: < 32:9.16.23-0.14.el8_8.2.alma.1
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.11.36-8.el8_8.2
- (no CPE)range: < 32:9.16.23-11.el9_2.2
- (no CPE)range: < 32:9.16.23-11.el9_2.2
- (no CPE)range: < 32:9.16.23-11.el9_2.2
- (no CPE)range: < 9.16.44-150400.5.37.2
- (no CPE)range: < 9.16.6-150300.22.41.1
- (no CPE)range: < 9.18.19-1.1
- (no CPE)range: < 9.16.44-150400.5.37.2
- (no CPE)range: < 9.16.44-150400.5.37.2
- (no CPE)range: < 9.11.22-3.49.1
- (no CPE)range: < 9.11.22-3.49.1
- (no CPE)range: < 9.11.22-3.49.1
- (no CPE)range: < 9.16.6-150000.12.71.1
- (no CPE)range: < 9.16.6-150000.12.71.1
- (no CPE)range: < 9.16.6-150000.12.71.1
- (no CPE)range: < 9.16.6-150000.12.71.1
- (no CPE)range: < 9.16.6-150000.12.71.1
- (no CPE)range: < 9.16.6-150000.12.71.1
- (no CPE)range: < 9.16.6-150000.12.71.1
- (no CPE)range: < 9.16.44-150500.8.12.2
- (no CPE)range: < 9.16.44-150500.8.12.2
- (no CPE)range: < 9.16.44-150500.8.12.2
- (no CPE)range: < 9.16.6-150300.22.41.1
- (no CPE)range: < 9.16.6-150300.22.41.1
- (no CPE)range: < 9.16.6-150300.22.41.1
- (no CPE)range: < 9.16.6-150300.22.41.1
- (no CPE)range: < 9.16.6-150300.22.41.1
- (no CPE)range: < 9.16.6-150300.22.41.1
Patches
Vulnerability mechanics
References
8- www.openwall.com/lists/oss-security/2023/09/20/2nvdMailing ListPatch
- kb.isc.org/docs/cve-2023-3341nvdVendor Advisory
- lists.debian.org/debian-lts-announce/2024/01/msg00021.htmlnvdThird Party Advisory
- lists.fedoraproject.org/archives/list/[email protected]/message/VSK5V4W4OHPM3JTJGWAQD6CZW7SFD75B/nvdMailing ListThird Party Advisory
- security.netapp.com/advisory/ntap-20231013-0003/nvdThird Party Advisory
- www.debian.org/security/2023/dsa-5504nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/[email protected]/message/IPJLLTJCSDJJII7IIZPLTBQNWP7MZH7F/nvdMailing List
- lists.fedoraproject.org/archives/list/[email protected]/message/U35OARLQCPMVCBBPHWBXY5M6XJLD2TZ5/nvdMailing List
News mentions
0No linked articles in our index yet.