Bug 1212609 (CVE-2023-2829) - VUL-0: CVE-2023-2829: bind: DNSSEC-Validated cache can be remotely terminated with malformed NSEC record
Summary: VUL-0: CVE-2023-2829: bind: DNSSEC-Validated cache can be remotely terminated...
Status: RESOLVED INVALID
Alias: CVE-2023-2829
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Major
Target Milestone: ---
Assignee: Jorik Cronenberg
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/370113/
Whiteboard: CVSSv3.1:SUSE:CVE-2023-2829:7.5:(AV:N...
Keywords:
Depends on:
Blocks:
 
Reported: 2023-06-22 07:57 UTC by Cathy Hu
Modified: 2023-06-23 07:31 UTC (History)
1 user (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Cathy Hu 2023-06-22 07:57:57 UTC 
CVE-2023-2829

A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option (`synth-from-dnssec`) enabled can be remotely terminated using a zone with a malformed NSEC record.
This issue affects BIND 9 versions 9.16.8-S1 through 9.16.41-S1 and 9.18.11-S1 through 9.18.15-S1.

https://kb.isc.org/docs/cve-2023-2829

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-2829
https://bugzilla.redhat.com/show_bug.cgi?id=2216581
https://www.cve.org/CVERecord?id=CVE-2023-2829
https://kb.isc.org/docs/cve-2023-2829
Comment 3 Cathy Hu 2023-06-23 07:31:56 UTC 
closing