CVE-2023-5680

Published: Feb 13, 2024Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: security-officer@isc.org (Secondary)

Description

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance. This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

Affected (28)

Products: Isc: Bind · Netapp: Active Iq Unified Manager

Isc

1 product

Bind

Netapp

1 product

Active Iq Unified Manager

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Isc Bind	Version 9.11.12 s1
Isc Bind	Version 9.11.21 s1
Isc Bind	Version 9.11.27 s1
Isc Bind	Version 9.11.29 s1
Isc Bind	Version 9.11.35 s1
Isc Bind	Version 9.11.37 s1
Isc Bind	Version 9.11.3 s1
Isc Bind	Version 9.11.3 s4
Isc Bind	Version 9.11.4 s1
Isc Bind	Version 9.11.5 s3
Isc Bind	Version 9.11.5 s5
Isc Bind	Version 9.11.5 s6
Isc Bind	Version 9.11.6 s1
Isc Bind	Version 9.11.7 s1
Isc Bind	Version 9.11.8 s1
Isc Bind	Version 9.16.11 s1
Isc Bind	Version 9.16.12 s1
Isc Bind	Version 9.16.13 s1
Isc Bind	Version 9.16.14 s1
Isc Bind	Version 9.16.21 s1
Isc Bind	Version 9.16.32 s1
Isc Bind	Version 9.16.36 s1
Isc Bind	Version 9.16.43 s1
Isc Bind	Version 9.16.8 s1
Isc Bind	Version 9.18.11 s1
Isc Bind	Version 9.18.18 s1
Isc Bind	Version 9.18.21 s1