csaf_suse - suse-su-2024:0590-1

Vulnerability from csaf_suse

Published

2024-02-22 13:38

Modified

2024-02-22 13:38

Summary

Security update for bind

Notes

Title of the patch

Security update for bind

Description of the patch

This update for bind fixes the following issues: Update to release 9.16.48: Feature Changes: * The IP addresses for B.ROOT-SERVERS.NET have been updated to 170.247.170.2 and 2801:1b8:10::b. Security Fixes: * Validating DNS messages containing a lot of DNSSEC signatures could cause excessive CPU load, leading to a denial-of-service condition. This has been fixed. (CVE-2023-50387) [bsc#1219823] * Preparing an NSEC3 closest encloser proof could cause excessive CPU load, leading to a denial-of-service condition. This has been fixed. (CVE-2023-50868) [bsc#1219826] * Parsing DNS messages with many different names could cause excessive CPU load. This has been fixed. (CVE-2023-4408) [bsc#1219851] * Specific queries could cause named to crash with an assertion failure when nxdomain-redirect was enabled. This has been fixed. (CVE-2023-5517) [bsc#1219852] * A bad interaction between DNS64 and serve-stale could cause named to crash with an assertion failure, when both of these features were enabled. This has been fixed. (CVE-2023-5679) [bsc#1219853] * Query patterns that continuously triggered cache database maintenance could cause an excessive amount of memory to be allocated, exceeding max-cache-size and potentially leading to all available memory on the host running named being exhausted. This has been fixed. (CVE-2023-6516) [bsc#1219854] Removed Features: * Support for using AES as the DNS COOKIE algorithm (cookie-algorithm aes;) has been deprecated and will be removed in a future release. Please use the current default, SipHash-2-4, instead.

Patchnames

SUSE-2024-590,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-590,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-590,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-590,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-590,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-590,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-590,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-590

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "important",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for bind",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "This update for bind fixes the following issues:\n\nUpdate to release 9.16.48:\n\nFeature Changes:\n* The IP addresses for B.ROOT-SERVERS.NET have been updated to\n  170.247.170.2 and 2801:1b8:10::b.\n\nSecurity Fixes:\n* Validating DNS messages containing a lot of DNSSEC signatures\n  could cause excessive CPU load, leading to a denial-of-service\n  condition. This has been fixed. (CVE-2023-50387) [bsc#1219823]\n* Preparing an NSEC3 closest encloser proof could cause excessive\n  CPU load, leading to a denial-of-service condition. This has\n  been fixed. (CVE-2023-50868) [bsc#1219826]\n* Parsing DNS messages with many different names could cause\n  excessive CPU load. This has been fixed. (CVE-2023-4408) [bsc#1219851]\n* Specific queries could cause named to crash with an assertion\n  failure when nxdomain-redirect was enabled. This has been\n  fixed. (CVE-2023-5517) [bsc#1219852]\n* A bad interaction between DNS64 and serve-stale could cause\n  named to crash with an assertion failure, when both of these\n  features were enabled. This has been fixed. (CVE-2023-5679)\n  [bsc#1219853]\n* Query patterns that continuously triggered cache database\n  maintenance could cause an excessive amount of memory to be\n  allocated, exceeding max-cache-size and potentially leading to\n  all available memory on the host running named being exhausted.\n  This has been fixed. (CVE-2023-6516) [bsc#1219854]\n\nRemoved Features:\n* Support for using AES as the DNS COOKIE algorithm\n  (cookie-algorithm aes;) has been deprecated and will be removed\n  in a future release. Please use the current default,\n  SipHash-2-4, instead.\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2024-590,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-590,SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-590,SUSE-SLE-Product-SLED-15-SP4-LTSS-2024-590,SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-590,SUSE-SLE-Product-SLES_SAP-15-SP4-2024-590,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-590,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-590",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0590-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2024:0590-1",
            url: "https://www.suse.com/support/update/announcement/2024/suse-su-20240590-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2024:0590-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017996.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219823",
            url: "https://bugzilla.suse.com/1219823",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219826",
            url: "https://bugzilla.suse.com/1219826",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219851",
            url: "https://bugzilla.suse.com/1219851",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219852",
            url: "https://bugzilla.suse.com/1219852",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219853",
            url: "https://bugzilla.suse.com/1219853",
         },
         {
            category: "self",
            summary: "SUSE Bug 1219854",
            url: "https://bugzilla.suse.com/1219854",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-4408 page",
            url: "https://www.suse.com/security/cve/CVE-2023-4408/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-50387 page",
            url: "https://www.suse.com/security/cve/CVE-2023-50387/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-50868 page",
            url: "https://www.suse.com/security/cve/CVE-2023-50868/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-5517 page",
            url: "https://www.suse.com/security/cve/CVE-2023-5517/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-5679 page",
            url: "https://www.suse.com/security/cve/CVE-2023-5679/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2023-6516 page",
            url: "https://www.suse.com/security/cve/CVE-2023-6516/",
         },
      ],
      title: "Security update for bind",
      tracking: {
         current_release_date: "2024-02-22T13:38:59Z",
         generator: {
            date: "2024-02-22T13:38:59Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2024:0590-1",
         initial_release_date: "2024-02-22T13:38:59Z",
         revision_history: [
            {
               date: "2024-02-22T13:38:59Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "bind-9.16.48-150400.5.40.1.aarch64",
                        product: {
                           name: "bind-9.16.48-150400.5.40.1.aarch64",
                           product_id: "bind-9.16.48-150400.5.40.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "bind-utils-9.16.48-150400.5.40.1.aarch64",
                        product: {
                           name: "bind-utils-9.16.48-150400.5.40.1.aarch64",
                           product_id: "bind-utils-9.16.48-150400.5.40.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "bind-9.16.48-150400.5.40.1.i586",
                        product: {
                           name: "bind-9.16.48-150400.5.40.1.i586",
                           product_id: "bind-9.16.48-150400.5.40.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "bind-utils-9.16.48-150400.5.40.1.i586",
                        product: {
                           name: "bind-utils-9.16.48-150400.5.40.1.i586",
                           product_id: "bind-utils-9.16.48-150400.5.40.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "bind-doc-9.16.48-150400.5.40.1.noarch",
                        product: {
                           name: "bind-doc-9.16.48-150400.5.40.1.noarch",
                           product_id: "bind-doc-9.16.48-150400.5.40.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-bind-9.16.48-150400.5.40.1.noarch",
                        product: {
                           name: "python3-bind-9.16.48-150400.5.40.1.noarch",
                           product_id: "python3-bind-9.16.48-150400.5.40.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "bind-9.16.48-150400.5.40.1.ppc64le",
                        product: {
                           name: "bind-9.16.48-150400.5.40.1.ppc64le",
                           product_id: "bind-9.16.48-150400.5.40.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "bind-utils-9.16.48-150400.5.40.1.ppc64le",
                        product: {
                           name: "bind-utils-9.16.48-150400.5.40.1.ppc64le",
                           product_id: "bind-utils-9.16.48-150400.5.40.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "bind-9.16.48-150400.5.40.1.s390x",
                        product: {
                           name: "bind-9.16.48-150400.5.40.1.s390x",
                           product_id: "bind-9.16.48-150400.5.40.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "bind-utils-9.16.48-150400.5.40.1.s390x",
                        product: {
                           name: "bind-utils-9.16.48-150400.5.40.1.s390x",
                           product_id: "bind-utils-9.16.48-150400.5.40.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "bind-9.16.48-150400.5.40.1.x86_64",
                        product: {
                           name: "bind-9.16.48-150400.5.40.1.x86_64",
                           product_id: "bind-9.16.48-150400.5.40.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "bind-utils-9.16.48-150400.5.40.1.x86_64",
                        product: {
                           name: "bind-utils-9.16.48-150400.5.40.1.x86_64",
                           product_id: "bind-utils-9.16.48-150400.5.40.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                        product: {
                           name: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                           product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle_hpc-espos:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                           product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle_hpc-ltss:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server 15 SP4-LTSS",
                        product: {
                           name: "SUSE Linux Enterprise Server 15 SP4-LTSS",
                           product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles-ltss:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                        product: {
                           name: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                           product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sles_sap:15:sp4",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Manager Proxy 4.3",
                        product: {
                           name: "SUSE Manager Proxy 4.3",
                           product_id: "SUSE Manager Proxy 4.3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-manager-proxy:4.3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Manager Server 4.3",
                        product: {
                           name: "SUSE Manager Server 4.3",
                           product_id: "SUSE Manager Server 4.3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:suse-manager-server:4.3",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-9.16.48-150400.5.40.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
            },
            product_reference: "bind-9.16.48-150400.5.40.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-9.16.48-150400.5.40.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
            },
            product_reference: "bind-9.16.48-150400.5.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-doc-9.16.48-150400.5.40.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
            },
            product_reference: "bind-doc-9.16.48-150400.5.40.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-utils-9.16.48-150400.5.40.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
            },
            product_reference: "bind-utils-9.16.48-150400.5.40.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-utils-9.16.48-150400.5.40.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
            },
            product_reference: "bind-utils-9.16.48-150400.5.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-bind-9.16.48-150400.5.40.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
            },
            product_reference: "python3-bind-9.16.48-150400.5.40.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-9.16.48-150400.5.40.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
            },
            product_reference: "bind-9.16.48-150400.5.40.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-9.16.48-150400.5.40.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
            },
            product_reference: "bind-9.16.48-150400.5.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-doc-9.16.48-150400.5.40.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
            },
            product_reference: "bind-doc-9.16.48-150400.5.40.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-utils-9.16.48-150400.5.40.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
            },
            product_reference: "bind-utils-9.16.48-150400.5.40.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-utils-9.16.48-150400.5.40.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
            },
            product_reference: "bind-utils-9.16.48-150400.5.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-bind-9.16.48-150400.5.40.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
            },
            product_reference: "python3-bind-9.16.48-150400.5.40.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-9.16.48-150400.5.40.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
            },
            product_reference: "bind-9.16.48-150400.5.40.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-9.16.48-150400.5.40.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
            },
            product_reference: "bind-9.16.48-150400.5.40.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-9.16.48-150400.5.40.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
            },
            product_reference: "bind-9.16.48-150400.5.40.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-9.16.48-150400.5.40.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
            },
            product_reference: "bind-9.16.48-150400.5.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-doc-9.16.48-150400.5.40.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
            },
            product_reference: "bind-doc-9.16.48-150400.5.40.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-utils-9.16.48-150400.5.40.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
            },
            product_reference: "bind-utils-9.16.48-150400.5.40.1.aarch64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-utils-9.16.48-150400.5.40.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
            },
            product_reference: "bind-utils-9.16.48-150400.5.40.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-utils-9.16.48-150400.5.40.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
            },
            product_reference: "bind-utils-9.16.48-150400.5.40.1.s390x",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-utils-9.16.48-150400.5.40.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
            },
            product_reference: "bind-utils-9.16.48-150400.5.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-bind-9.16.48-150400.5.40.1.noarch as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
               product_id: "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
            },
            product_reference: "python3-bind-9.16.48-150400.5.40.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server 15 SP4-LTSS",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-9.16.48-150400.5.40.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
            },
            product_reference: "bind-9.16.48-150400.5.40.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-9.16.48-150400.5.40.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
            },
            product_reference: "bind-9.16.48-150400.5.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-doc-9.16.48-150400.5.40.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
            },
            product_reference: "bind-doc-9.16.48-150400.5.40.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-utils-9.16.48-150400.5.40.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
            },
            product_reference: "bind-utils-9.16.48-150400.5.40.1.ppc64le",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-utils-9.16.48-150400.5.40.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
            },
            product_reference: "bind-utils-9.16.48-150400.5.40.1.x86_64",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-bind-9.16.48-150400.5.40.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
               product_id: "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
            },
            product_reference: "python3-bind-9.16.48-150400.5.40.1.noarch",
            relates_to_product_reference: "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-9.16.48-150400.5.40.1.x86_64 as component of SUSE Manager Proxy 4.3",
               product_id: "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
            },
            product_reference: "bind-9.16.48-150400.5.40.1.x86_64",
            relates_to_product_reference: "SUSE Manager Proxy 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-doc-9.16.48-150400.5.40.1.noarch as component of SUSE Manager Proxy 4.3",
               product_id: "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
            },
            product_reference: "bind-doc-9.16.48-150400.5.40.1.noarch",
            relates_to_product_reference: "SUSE Manager Proxy 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-utils-9.16.48-150400.5.40.1.x86_64 as component of SUSE Manager Proxy 4.3",
               product_id: "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
            },
            product_reference: "bind-utils-9.16.48-150400.5.40.1.x86_64",
            relates_to_product_reference: "SUSE Manager Proxy 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-bind-9.16.48-150400.5.40.1.noarch as component of SUSE Manager Proxy 4.3",
               product_id: "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
            },
            product_reference: "python3-bind-9.16.48-150400.5.40.1.noarch",
            relates_to_product_reference: "SUSE Manager Proxy 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-9.16.48-150400.5.40.1.ppc64le as component of SUSE Manager Server 4.3",
               product_id: "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
            },
            product_reference: "bind-9.16.48-150400.5.40.1.ppc64le",
            relates_to_product_reference: "SUSE Manager Server 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-9.16.48-150400.5.40.1.s390x as component of SUSE Manager Server 4.3",
               product_id: "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
            },
            product_reference: "bind-9.16.48-150400.5.40.1.s390x",
            relates_to_product_reference: "SUSE Manager Server 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-9.16.48-150400.5.40.1.x86_64 as component of SUSE Manager Server 4.3",
               product_id: "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
            },
            product_reference: "bind-9.16.48-150400.5.40.1.x86_64",
            relates_to_product_reference: "SUSE Manager Server 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-doc-9.16.48-150400.5.40.1.noarch as component of SUSE Manager Server 4.3",
               product_id: "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
            },
            product_reference: "bind-doc-9.16.48-150400.5.40.1.noarch",
            relates_to_product_reference: "SUSE Manager Server 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-utils-9.16.48-150400.5.40.1.ppc64le as component of SUSE Manager Server 4.3",
               product_id: "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
            },
            product_reference: "bind-utils-9.16.48-150400.5.40.1.ppc64le",
            relates_to_product_reference: "SUSE Manager Server 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-utils-9.16.48-150400.5.40.1.s390x as component of SUSE Manager Server 4.3",
               product_id: "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
            },
            product_reference: "bind-utils-9.16.48-150400.5.40.1.s390x",
            relates_to_product_reference: "SUSE Manager Server 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "bind-utils-9.16.48-150400.5.40.1.x86_64 as component of SUSE Manager Server 4.3",
               product_id: "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
            },
            product_reference: "bind-utils-9.16.48-150400.5.40.1.x86_64",
            relates_to_product_reference: "SUSE Manager Server 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-bind-9.16.48-150400.5.40.1.noarch as component of SUSE Manager Server 4.3",
               product_id: "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
            },
            product_reference: "python3-bind-9.16.48-150400.5.40.1.noarch",
            relates_to_product_reference: "SUSE Manager Server 4.3",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2023-4408",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-4408",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` instance by exploiting this flaw. This issue affects both authoritative servers and recursive resolvers.\nThis issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-4408",
               url: "https://www.suse.com/security/cve/CVE-2023-4408",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219823 for CVE-2023-4408",
               url: "https://bugzilla.suse.com/1219823",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219851 for CVE-2023-4408",
               url: "https://bugzilla.suse.com/1219851",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221586 for CVE-2023-4408",
               url: "https://bugzilla.suse.com/1221586",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-02-22T13:38:59Z",
               details: "important",
            },
         ],
         title: "CVE-2023-4408",
      },
      {
         cve: "CVE-2023-50387",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-50387",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-50387",
               url: "https://www.suse.com/security/cve/CVE-2023-50387",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219823 for CVE-2023-50387",
               url: "https://bugzilla.suse.com/1219823",
            },
            {
               category: "external",
               summary: "SUSE Bug 1220717 for CVE-2023-50387",
               url: "https://bugzilla.suse.com/1220717",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221586 for CVE-2023-50387",
               url: "https://bugzilla.suse.com/1221586",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-02-22T13:38:59Z",
               details: "important",
            },
         ],
         title: "CVE-2023-50387",
      },
      {
         cve: "CVE-2023-50868",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-50868",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-50868",
               url: "https://www.suse.com/security/cve/CVE-2023-50868",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219823 for CVE-2023-50868",
               url: "https://bugzilla.suse.com/1219823",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219826 for CVE-2023-50868",
               url: "https://bugzilla.suse.com/1219826",
            },
            {
               category: "external",
               summary: "SUSE Bug 1221586 for CVE-2023-50868",
               url: "https://bugzilla.suse.com/1221586",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-02-22T13:38:59Z",
               details: "important",
            },
         ],
         title: "CVE-2023-50868",
      },
      {
         cve: "CVE-2023-5517",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-5517",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when:\n\n  - `nxdomain-redirect <domain>;` is configured, and\n  - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response.\nThis issue affects BIND 9 versions 9.12.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-5517",
               url: "https://www.suse.com/security/cve/CVE-2023-5517",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219852 for CVE-2023-5517",
               url: "https://bugzilla.suse.com/1219852",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-02-22T13:38:59Z",
               details: "important",
            },
         ],
         title: "CVE-2023-5517",
      },
      {
         cve: "CVE-2023-5679",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-5679",
            },
         ],
         notes: [
            {
               category: "general",
               text: "A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.\nThis issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-5679",
               url: "https://www.suse.com/security/cve/CVE-2023-5679",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219853 for CVE-2023-5679",
               url: "https://bugzilla.suse.com/1219853",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-02-22T13:38:59Z",
               details: "important",
            },
         ],
         title: "CVE-2023-5679",
      },
      {
         cve: "CVE-2023-6516",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2023-6516",
            },
         ],
         notes: [
            {
               category: "general",
               text: "To keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asynchronous: a small chunk of memory pointing to the cache element that can be cleaned up is first allocated and then queued for later processing. It was discovered that if the resolver is continuously processing query patterns triggering this type of cache-database maintenance, `named` may not be able to handle the cleanup events in a timely manner. This in turn enables the list of queued cleanup events to grow infinitely large over time, allowing the configured `max-cache-size` limit to be significantly exceeded.\nThis issue affects BIND 9 versions 9.16.0 through 9.16.45 and 9.16.8-S1 through 9.16.45-S1.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
               "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
               "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
               "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2023-6516",
               url: "https://www.suse.com/security/cve/CVE-2023-6516",
            },
            {
               category: "external",
               summary: "SUSE Bug 1219854 for CVE-2023-6516",
               url: "https://bugzilla.suse.com/1219854",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.aarch64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server 15 SP4-LTSS:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Linux Enterprise Server for SAP Applications 15 SP4:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Proxy 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Proxy 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:bind-doc-9.16.48-150400.5.40.1.noarch",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.ppc64le",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.s390x",
                  "SUSE Manager Server 4.3:bind-utils-9.16.48-150400.5.40.1.x86_64",
                  "SUSE Manager Server 4.3:python3-bind-9.16.48-150400.5.40.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-02-22T13:38:59Z",
               details: "important",
            },
         ],
         title: "CVE-2023-6516",
      },
   ],
}

cve-2023-6516

Vulnerability from cvelistv5

Published

2024-02-13 14:05

Modified

2025-02-13 17:26

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

To keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asynchronous: a small chunk of memory pointing to the cache element that can be cleaned up is first allocated and then queued for later processing. It was discovered that if the resolver is continuously processing query patterns triggering this type of cache-database maintenance, `named` may not be able to handle the cleanup events in a timely manner. This in turn enables the list of queued cleanup events to grow infinitely large over time, allowing the configured `max-cache-size` limit to be significantly exceeded. This issue affects BIND 9 versions 9.16.0 through 9.16.45 and 9.16.8-S1 through 9.16.45-S1.

References

▼	URL	Tags
	https://kb.isc.org/docs/cve-2023-6516	vendor-advisory
	http://www.openwall.com/lists/oss-security/2024/02/13/1
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/
	https://security.netapp.com/advisory/ntap-20240503-0008/

Impacted products

	Vendor	Product	Version
	ISC	BIND 9	Version: 9.16.0 < Version: 9.16.8-S1 <

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "bind",
                  vendor: "isc",
                  versions: [
                     {
                        lessThanOrEqual: "9.16.45",
                        status: "affected",
                        version: "9.16.0",
                        versionType: "custom",
                     },
                     {
                        lessThanOrEqual: "9.16.45-s1",
                        status: "affected",
                        version: "9.16.8-s1",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-6516",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-02-20T16:01:15.527012Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-789",
                        description: "CWE-789 Memory Allocation with Excessive Size Value",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-06-28T16:35:10.580Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T08:35:13.212Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "CVE-2023-6516",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://kb.isc.org/docs/cve-2023-6516",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/02/13/1",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20240503-0008/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "BIND 9",
               vendor: "ISC",
               versions: [
                  {
                     lessThanOrEqual: "9.16.45",
                     status: "affected",
                     version: "9.16.0",
                     versionType: "custom",
                  },
                  {
                     lessThanOrEqual: "9.16.45-S1",
                     status: "affected",
                     version: "9.16.8-S1",
                     versionType: "custom",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "ISC would like to thank Infoblox for bringing this vulnerability to our attention.",
            },
         ],
         datePublic: "2024-02-13T00:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               value: "To keep its cache database efficient, `named` running as a recursive resolver occasionally attempts to clean up the database. It uses several methods, including some that are asynchronous: a small chunk of memory pointing to the cache element that can be cleaned up is first allocated and then queued for later processing. It was discovered that if the resolver is continuously processing query patterns triggering this type of cache-database maintenance, `named` may not be able to handle the cleanup events in a timely manner. This in turn enables the list of queued cleanup events to grow infinitely large over time, allowing the configured `max-cache-size` limit to be significantly exceeded.\nThis issue affects BIND 9 versions 9.16.0 through 9.16.45 and 9.16.8-S1 through 9.16.45-S1.",
            },
         ],
         exploits: [
            {
               lang: "en",
               value: "We are not aware of any active exploits.",
            },
         ],
         impacts: [
            {
               descriptions: [
                  {
                     lang: "en",
                     value: "By exploiting this flaw, an attacker can cause the amount of memory used by a `named` resolver to go well beyond the configured `max-cache-size` limit. The effectiveness of the attack depends on a number of environmental factors, but in the worst case the attacker can exhaust all available memory on the host running `named`, leading to a denial-of-service condition.",
                  },
               ],
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-05-03T13:06:07.107Z",
            orgId: "404fd4d2-a609-4245-b543-2c944a302a22",
            shortName: "isc",
         },
         references: [
            {
               name: "CVE-2023-6516",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://kb.isc.org/docs/cve-2023-6516",
            },
            {
               url: "http://www.openwall.com/lists/oss-security/2024/02/13/1",
            },
            {
               url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
            },
            {
               url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20240503-0008/",
            },
         ],
         solutions: [
            {
               lang: "en",
               value: "Upgrade to the patched release most closely related to your current version of BIND 9: 9.16.48 or 9.16.48-S1.",
            },
         ],
         source: {
            discovery: "EXTERNAL",
         },
         title: "Specific recursive query patterns may lead to an out-of-memory condition",
         workarounds: [
            {
               lang: "en",
               value: "No workarounds known.",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "404fd4d2-a609-4245-b543-2c944a302a22",
      assignerShortName: "isc",
      cveId: "CVE-2023-6516",
      datePublished: "2024-02-13T14:05:28.933Z",
      dateReserved: "2023-12-05T10:44:59.435Z",
      dateUpdated: "2025-02-13T17:26:26.170Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-50868

Vulnerability from cvelistv5

Published

2024-02-14 00:00

Modified

2024-08-02 22:23

Severity ?

Summary

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.

References

▼	URL	Tags
	https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/
	https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html
	https://www.isc.org/blogs/2024-bind-security-release/
	https://datatracker.ietf.org/doc/html/rfc5155
	https://kb.isc.org/docs/cve-2023-50868
	https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1
	https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html
	https://access.redhat.com/security/cve/CVE-2023-50868
	https://bugzilla.suse.com/show_bug.cgi?id=1219826
	http://www.openwall.com/lists/oss-security/2024/02/16/2	mailing-list
	http://www.openwall.com/lists/oss-security/2024/02/16/3	mailing-list
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html	mailing-list
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/	vendor-advisory
	https://security.netapp.com/advisory/ntap-20240307-0008/
	https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html	mailing-list

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T22:23:43.905Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.isc.org/blogs/2024-bind-security-release/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://datatracker.ietf.org/doc/html/rfc5155",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://kb.isc.org/docs/cve-2023-50868",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/security/cve/CVE-2023-50868",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.suse.com/show_bug.cgi?id=1219826",
               },
               {
                  name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/02/16/2",
               },
               {
                  name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/02/16/3",
               },
               {
                  name: "FEDORA-2024-2e26eccfcb",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
               },
               {
                  name: "FEDORA-2024-e24211eff0",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
               },
               {
                  name: "FEDORA-2024-21310568fa",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
               },
               {
                  name: "[debian-lts-announce] 20240221 [SECURITY] [DLA 3736-1] unbound security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
               },
               {
                  name: "FEDORA-2024-b0f9656a76",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
               },
               {
                  name: "FEDORA-2024-4e36df9dfd",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
               },
               {
                  name: "FEDORA-2024-499b9be35f",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
               },
               {
                  name: "FEDORA-2024-c36c448396",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
               },
               {
                  name: "FEDORA-2024-c967c7d287",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
               },
               {
                  name: "FEDORA-2024-e00eceb11c",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
               },
               {
                  name: "FEDORA-2024-fae88b73eb",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20240307-0008/",
               },
               {
                  name: "[debian-lts-announce] 20240517 [SECURITY] [DLA 3816-1] bind9 security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the \"NSEC3\" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-06-10T16:14:14.129606",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
            },
            {
               url: "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
            },
            {
               url: "https://www.isc.org/blogs/2024-bind-security-release/",
            },
            {
               url: "https://datatracker.ietf.org/doc/html/rfc5155",
            },
            {
               url: "https://kb.isc.org/docs/cve-2023-50868",
            },
            {
               url: "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
            },
            {
               url: "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
            },
            {
               url: "https://access.redhat.com/security/cve/CVE-2023-50868",
            },
            {
               url: "https://bugzilla.suse.com/show_bug.cgi?id=1219826",
            },
            {
               name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2024/02/16/2",
            },
            {
               name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2024/02/16/3",
            },
            {
               name: "FEDORA-2024-2e26eccfcb",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
            },
            {
               name: "FEDORA-2024-e24211eff0",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
            },
            {
               name: "FEDORA-2024-21310568fa",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
            },
            {
               name: "[debian-lts-announce] 20240221 [SECURITY] [DLA 3736-1] unbound security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
            },
            {
               name: "FEDORA-2024-b0f9656a76",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
            },
            {
               name: "FEDORA-2024-4e36df9dfd",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
            },
            {
               name: "FEDORA-2024-499b9be35f",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
            },
            {
               name: "FEDORA-2024-c36c448396",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
            },
            {
               name: "FEDORA-2024-c967c7d287",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
            },
            {
               name: "FEDORA-2024-e00eceb11c",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
            },
            {
               name: "FEDORA-2024-fae88b73eb",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20240307-0008/",
            },
            {
               name: "[debian-lts-announce] 20240517 [SECURITY] [DLA 3816-1] bind9 security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2023-50868",
      datePublished: "2024-02-14T00:00:00",
      dateReserved: "2023-12-14T00:00:00",
      dateUpdated: "2024-08-02T22:23:43.905Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-4408

Vulnerability from cvelistv5

Published

2024-02-13 14:04

Modified

2025-03-14 16:16

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` instance by exploiting this flaw. This issue affects both authoritative servers and recursive resolvers. This issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

References

▼	URL	Tags
	https://kb.isc.org/docs/cve-2023-4408	vendor-advisory
	http://www.openwall.com/lists/oss-security/2024/02/13/1
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/
	https://security.netapp.com/advisory/ntap-20240426-0001/

Impacted products

	Vendor	Product	Version
	ISC	BIND 9	Version: 9.0.0 < Version: 9.18.0 < Version: 9.19.0 < Version: 9.9.3-S1 < Version: 9.16.8-S1 < Version: 9.18.11-S1 <

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-4408",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-02-21T20:37:05.447060Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-407",
                        description: "CWE-407 Inefficient Algorithmic Complexity",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-03-14T16:16:25.564Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T07:24:04.673Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "CVE-2023-4408",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://kb.isc.org/docs/cve-2023-4408",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/02/13/1",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20240426-0001/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "BIND 9",
               vendor: "ISC",
               versions: [
                  {
                     lessThanOrEqual: "9.16.45",
                     status: "affected",
                     version: "9.0.0",
                     versionType: "custom",
                  },
                  {
                     lessThanOrEqual: "9.18.21",
                     status: "affected",
                     version: "9.18.0",
                     versionType: "custom",
                  },
                  {
                     lessThanOrEqual: "9.19.19",
                     status: "affected",
                     version: "9.19.0",
                     versionType: "custom",
                  },
                  {
                     lessThanOrEqual: "9.11.37-S1",
                     status: "affected",
                     version: "9.9.3-S1",
                     versionType: "custom",
                  },
                  {
                     lessThanOrEqual: "9.16.45-S1",
                     status: "affected",
                     version: "9.16.8-S1",
                     versionType: "custom",
                  },
                  {
                     lessThanOrEqual: "9.18.21-S1",
                     status: "affected",
                     version: "9.18.11-S1",
                     versionType: "custom",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "ISC would like to thank Shoham Danino from Reichman University, Anat Bremler-Barr from Tel-Aviv University, Yehuda Afek from Tel-Aviv University, and Yuval Shavitt from Tel-Aviv University for bringing this vulnerability to our attention.",
            },
         ],
         datePublic: "2024-02-13T00:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               value: "The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` instance by exploiting this flaw. This issue affects both authoritative servers and recursive resolvers.\nThis issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.",
            },
         ],
         exploits: [
            {
               lang: "en",
               value: "We are not aware of any active exploits.",
            },
         ],
         impacts: [
            {
               descriptions: [
                  {
                     lang: "en",
                     value: "By flooding the target server with queries exploiting this flaw an attacker can significantly impair the server's performance, effectively denying legitimate clients access to the DNS resolution service.",
                  },
               ],
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-04-26T09:06:37.227Z",
            orgId: "404fd4d2-a609-4245-b543-2c944a302a22",
            shortName: "isc",
         },
         references: [
            {
               name: "CVE-2023-4408",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://kb.isc.org/docs/cve-2023-4408",
            },
            {
               url: "http://www.openwall.com/lists/oss-security/2024/02/13/1",
            },
            {
               url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
            },
            {
               url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
            },
            {
               url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
            },
            {
               url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20240426-0001/",
            },
         ],
         solutions: [
            {
               lang: "en",
               value: "Upgrade to the patched release most closely related to your current version of BIND 9: 9.16.48, 9.18.24, 9.19.21, 9.16.48-S1, or 9.18.24-S1.",
            },
         ],
         source: {
            discovery: "EXTERNAL",
         },
         title: "Parsing large DNS messages may cause excessive CPU load",
         workarounds: [
            {
               lang: "en",
               value: "No workarounds known.",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "404fd4d2-a609-4245-b543-2c944a302a22",
      assignerShortName: "isc",
      cveId: "CVE-2023-4408",
      datePublished: "2024-02-13T14:04:17.519Z",
      dateReserved: "2023-08-18T07:59:28.420Z",
      dateUpdated: "2025-03-14T16:16:25.564Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-5679

Vulnerability from cvelistv5

Published

2024-02-13 14:05

Modified

2025-03-28 23:51

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled. This issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

References

▼	URL	Tags
	https://kb.isc.org/docs/cve-2023-5679	vendor-advisory
	http://www.openwall.com/lists/oss-security/2024/02/13/1
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/
	https://security.netapp.com/advisory/ntap-20240426-0002/

Impacted products

	Vendor	Product	Version
	ISC	BIND 9	Version: 9.16.12 < Version: 9.18.0 < Version: 9.19.0 < Version: 9.16.12-S1 < Version: 9.18.11-S1 <

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-5679",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-02-13T19:24:41.299409Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-617",
                        description: "CWE-617 Reachable Assertion",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-03-28T23:51:12.042Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T08:07:32.560Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "CVE-2023-5679",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://kb.isc.org/docs/cve-2023-5679",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/02/13/1",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20240426-0002/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "BIND 9",
               vendor: "ISC",
               versions: [
                  {
                     lessThanOrEqual: "9.16.45",
                     status: "affected",
                     version: "9.16.12",
                     versionType: "custom",
                  },
                  {
                     lessThanOrEqual: "9.18.21",
                     status: "affected",
                     version: "9.18.0",
                     versionType: "custom",
                  },
                  {
                     lessThanOrEqual: "9.19.19",
                     status: "affected",
                     version: "9.19.0",
                     versionType: "custom",
                  },
                  {
                     lessThanOrEqual: "9.16.45-S1",
                     status: "affected",
                     version: "9.16.12-S1",
                     versionType: "custom",
                  },
                  {
                     lessThanOrEqual: "9.18.21-S1",
                     status: "affected",
                     version: "9.18.11-S1",
                     versionType: "custom",
                  },
               ],
            },
         ],
         datePublic: "2024-02-13T00:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               value: "A bad interaction between DNS64 and serve-stale may cause `named` to crash with an assertion failure during recursive resolution, when both of these features are enabled.\nThis issue affects BIND 9 versions 9.16.12 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.12-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.",
            },
         ],
         exploits: [
            {
               lang: "en",
               value: "We are not aware of any active exploits.",
            },
         ],
         impacts: [
            {
               descriptions: [
                  {
                     lang: "en",
                     value: "By querying a DNS64-enabled resolver for domain names triggering serve-stale, an attacker can cause `named` to crash with an assertion failure.",
                  },
               ],
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-04-26T09:07:08.838Z",
            orgId: "404fd4d2-a609-4245-b543-2c944a302a22",
            shortName: "isc",
         },
         references: [
            {
               name: "CVE-2023-5679",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://kb.isc.org/docs/cve-2023-5679",
            },
            {
               url: "http://www.openwall.com/lists/oss-security/2024/02/13/1",
            },
            {
               url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
            },
            {
               url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
            },
            {
               url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
            },
            {
               url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20240426-0002/",
            },
         ],
         solutions: [
            {
               lang: "en",
               value: "Upgrade to the patched release most closely related to your current version of BIND 9: 9.16.48, 9.18.24, 9.19.21, 9.16.48-S1, or 9.18.24-S1.",
            },
         ],
         source: {
            discovery: "EXTERNAL",
         },
         title: "Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution",
         workarounds: [
            {
               lang: "en",
               value: "Disabling serve-stale (with `stale-cache-enable no;` and `stale-answer-enable no;`) and/or disabling `dns64` makes the faulty code path impossible to reach, preventing this flaw from being exploitable.",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "404fd4d2-a609-4245-b543-2c944a302a22",
      assignerShortName: "isc",
      cveId: "CVE-2023-5679",
      datePublished: "2024-02-13T14:05:06.688Z",
      dateReserved: "2023-10-20T11:00:26.909Z",
      dateUpdated: "2025-03-28T23:51:12.042Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-50387

Vulnerability from cvelistv5

Published

2024-02-14 00:00

Modified

2024-08-02 22:16

Severity ?

Summary

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.

References

▼	URL	Tags
	https://www.athene-center.de/aktuelles/key-trap
	https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/
	https://kb.isc.org/docs/cve-2023-50387
	https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html
	https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/
	https://news.ycombinator.com/item?id=39367411
	https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/
	https://www.isc.org/blogs/2024-bind-security-release/
	https://news.ycombinator.com/item?id=39372384
	https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1
	https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html
	https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387
	https://access.redhat.com/security/cve/CVE-2023-50387
	https://bugzilla.suse.com/show_bug.cgi?id=1219823
	https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf
	http://www.openwall.com/lists/oss-security/2024/02/16/2	mailing-list
	http://www.openwall.com/lists/oss-security/2024/02/16/3	mailing-list
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/	vendor-advisory
	https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html	mailing-list
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/	vendor-advisory
	https://security.netapp.com/advisory/ntap-20240307-0007/
	https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html	mailing-list

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T22:16:46.692Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.athene-center.de/aktuelles/key-trap",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://kb.isc.org/docs/cve-2023-50387",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://news.ycombinator.com/item?id=39367411",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.isc.org/blogs/2024-bind-security-release/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://news.ycombinator.com/item?id=39372384",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/security/cve/CVE-2023-50387",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://bugzilla.suse.com/show_bug.cgi?id=1219823",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf",
               },
               {
                  name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/02/16/2",
               },
               {
                  name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/02/16/3",
               },
               {
                  name: "FEDORA-2024-2e26eccfcb",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
               },
               {
                  name: "FEDORA-2024-e24211eff0",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
               },
               {
                  name: "FEDORA-2024-21310568fa",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
               },
               {
                  name: "[debian-lts-announce] 20240221 [SECURITY] [DLA 3736-1] unbound security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
               },
               {
                  name: "FEDORA-2024-b0f9656a76",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
               },
               {
                  name: "FEDORA-2024-4e36df9dfd",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
               },
               {
                  name: "FEDORA-2024-499b9be35f",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
               },
               {
                  name: "FEDORA-2024-c36c448396",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
               },
               {
                  name: "FEDORA-2024-c967c7d287",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
               },
               {
                  name: "FEDORA-2024-e00eceb11c",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
               },
               {
                  name: "FEDORA-2024-fae88b73eb",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20240307-0007/",
               },
               {
                  name: "[debian-lts-announce] 20240517 [SECURITY] [DLA 3816-1] bind9 security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the \"KeyTrap\" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-06-10T16:14:16.780094",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "https://www.athene-center.de/aktuelles/key-trap",
            },
            {
               url: "https://nlnetlabs.nl/news/2024/Feb/13/unbound-1.19.1-released/",
            },
            {
               url: "https://kb.isc.org/docs/cve-2023-50387",
            },
            {
               url: "https://docs.powerdns.com/recursor/security-advisories/powerdns-advisory-2024-01.html",
            },
            {
               url: "https://www.theregister.com/2024/02/13/dnssec_vulnerability_internet/",
            },
            {
               url: "https://news.ycombinator.com/item?id=39367411",
            },
            {
               url: "https://www.securityweek.com/keytrap-dns-attack-could-disable-large-parts-of-internet-researchers/",
            },
            {
               url: "https://www.isc.org/blogs/2024-bind-security-release/",
            },
            {
               url: "https://news.ycombinator.com/item?id=39372384",
            },
            {
               url: "https://gitlab.nic.cz/knot/knot-resolver/-/releases/v5.7.1",
            },
            {
               url: "https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2024q1/017430.html",
            },
            {
               url: "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-50387",
            },
            {
               url: "https://access.redhat.com/security/cve/CVE-2023-50387",
            },
            {
               url: "https://bugzilla.suse.com/show_bug.cgi?id=1219823",
            },
            {
               url: "https://www.athene-center.de/fileadmin/content/PDF/Technical_Report_KeyTrap.pdf",
            },
            {
               name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2024/02/16/2",
            },
            {
               name: "[oss-security] 20240216 Re: Unbound: disclosure of CVE-2023-50387 and CVE-2023-50868 DNSSEC validation vulnerabilities",
               tags: [
                  "mailing-list",
               ],
               url: "http://www.openwall.com/lists/oss-security/2024/02/16/3",
            },
            {
               name: "FEDORA-2024-2e26eccfcb",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVYA42BLXUCIDLD35YIJPJSHDIADNYMP/",
            },
            {
               name: "FEDORA-2024-e24211eff0",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BUIP7T7Z4T3UHLXFWG6XIVDP4GYPD3AI/",
            },
            {
               name: "FEDORA-2024-21310568fa",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
            },
            {
               name: "[debian-lts-announce] 20240221 [SECURITY] [DLA 3736-1] unbound security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2024/02/msg00006.html",
            },
            {
               name: "FEDORA-2024-b0f9656a76",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TEXGOYGW7DBS3N2QSSQONZ4ENIRQEAPG/",
            },
            {
               name: "FEDORA-2024-4e36df9dfd",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UQESRWMJCF4JEYJEAKLRM6CT55GLJAB7/",
            },
            {
               name: "FEDORA-2024-499b9be35f",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
            },
            {
               name: "FEDORA-2024-c36c448396",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
            },
            {
               name: "FEDORA-2024-c967c7d287",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6FV5O347JTX7P5OZA6NGO4MKTXRXMKOZ/",
            },
            {
               name: "FEDORA-2024-e00eceb11c",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGSLGKUAQTW5JPPZCMF5YPEYALLRUZZ6/",
            },
            {
               name: "FEDORA-2024-fae88b73eb",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20240307-0007/",
            },
            {
               name: "[debian-lts-announce] 20240517 [SECURITY] [DLA 3816-1] bind9 security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2024/05/msg00011.html",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2023-50387",
      datePublished: "2024-02-14T00:00:00",
      dateReserved: "2023-12-07T00:00:00",
      dateUpdated: "2024-08-02T22:16:46.692Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2023-5517

Vulnerability from cvelistv5

Published

2024-02-13 14:04

Modified

2025-02-13 17:25

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

A flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when: - `nxdomain-redirect <domain>;` is configured, and - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response. This issue affects BIND 9 versions 9.12.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

References

▼	URL	Tags
	https://kb.isc.org/docs/cve-2023-5517	vendor-advisory
	http://www.openwall.com/lists/oss-security/2024/02/13/1
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/
	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/
	https://security.netapp.com/advisory/ntap-20240503-0006/

Impacted products

	Vendor	Product	Version
	ISC	BIND 9	Version: 9.12.0 < Version: 9.18.0 < Version: 9.19.0 < Version: 9.16.8-S1 < Version: 9.18.11-S1 <

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T07:59:44.936Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "CVE-2023-5517",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://kb.isc.org/docs/cve-2023-5517",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2024/02/13/1",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20240503-0006/",
               },
            ],
            title: "CVE Program Container",
         },
         {
            affected: [
               {
                  cpes: [
                     "cpe:2.3:a:isc:bind_9:*:*:*:*:*:*:*:*",
                  ],
                  defaultStatus: "unknown",
                  product: "bind_9",
                  vendor: "isc",
                  versions: [
                     {
                        lessThanOrEqual: "9.16.45",
                        status: "affected",
                        version: "9.12.0",
                        versionType: "custom",
                     },
                     {
                        lessThanOrEqual: "9.18.21",
                        status: "affected",
                        version: "9.18.0",
                        versionType: "custom",
                     },
                     {
                        lessThanOrEqual: "9.19.19",
                        status: "affected",
                        version: "9.19.0",
                        versionType: "custom",
                     },
                     {
                        lessThanOrEqual: "9.16.45-S1",
                        status: "affected",
                        version: "9.16.8-S1",
                        versionType: "custom",
                     },
                     {
                        lessThanOrEqual: "9.18.21-S1",
                        status: "affected",
                        version: "9.18.11-S1",
                        versionType: "custom",
                     },
                  ],
               },
            ],
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-5517",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "yes",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-08-22T13:32:01.260266Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-617",
                        description: "CWE-617 Reachable Assertion",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-08-22T13:56:51.119Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "BIND 9",
               vendor: "ISC",
               versions: [
                  {
                     lessThanOrEqual: "9.16.45",
                     status: "affected",
                     version: "9.12.0",
                     versionType: "custom",
                  },
                  {
                     lessThanOrEqual: "9.18.21",
                     status: "affected",
                     version: "9.18.0",
                     versionType: "custom",
                  },
                  {
                     lessThanOrEqual: "9.19.19",
                     status: "affected",
                     version: "9.19.0",
                     versionType: "custom",
                  },
                  {
                     lessThanOrEqual: "9.16.45-S1",
                     status: "affected",
                     version: "9.16.8-S1",
                     versionType: "custom",
                  },
                  {
                     lessThanOrEqual: "9.18.21-S1",
                     status: "affected",
                     version: "9.18.11-S1",
                     versionType: "custom",
                  },
               ],
            },
         ],
         datePublic: "2024-02-13T00:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               value: "A flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when:\n\n  - `nxdomain-redirect <domain>;` is configured, and\n  - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response.\nThis issue affects BIND 9 versions 9.12.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.",
            },
         ],
         exploits: [
            {
               lang: "en",
               value: "We are not aware of any active exploits.",
            },
         ],
         impacts: [
            {
               descriptions: [
                  {
                     lang: "en",
                     value: "If both of the above conditions are met, a single suitable query will cause `named` to crash.",
                  },
               ],
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-05-03T13:06:16.924Z",
            orgId: "404fd4d2-a609-4245-b543-2c944a302a22",
            shortName: "isc",
         },
         references: [
            {
               name: "CVE-2023-5517",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://kb.isc.org/docs/cve-2023-5517",
            },
            {
               url: "http://www.openwall.com/lists/oss-security/2024/02/13/1",
            },
            {
               url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/",
            },
            {
               url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/",
            },
            {
               url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/",
            },
            {
               url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20240503-0006/",
            },
         ],
         solutions: [
            {
               lang: "en",
               value: "Upgrade to the patched release most closely related to your current version of BIND 9: 9.16.48, 9.18.24, 9.19.21, 9.16.48-S1, or 9.18.24-S1.",
            },
         ],
         source: {
            discovery: "EXTERNAL",
         },
         title: "Querying RFC 1918 reverse zones may cause an assertion failure when \"nxdomain-redirect\" is enabled",
         workarounds: [
            {
               lang: "en",
               value: "Disabling the `nxdomain-redirect` feature makes the faulty code path impossible to reach, preventing this flaw from being exploitable.",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "404fd4d2-a609-4245-b543-2c944a302a22",
      assignerShortName: "isc",
      cveId: "CVE-2023-5517",
      datePublished: "2024-02-13T14:04:54.389Z",
      dateReserved: "2023-10-11T07:02:42.359Z",
      dateUpdated: "2025-02-13T17:25:39.556Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

cve-2023-6516

Vulnerability from cvelistv5

cve-2023-50868

Vulnerability from cvelistv5

cve-2023-4408

Vulnerability from cvelistv5

cve-2023-5679

Vulnerability from cvelistv5

cve-2023-50387

Vulnerability from cvelistv5

cve-2023-5517

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature