AZL-27305
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-27305.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-27305
- Upstream
- Published
- 2023-06-21T17:15:47Z
- Modified
- 2026-04-21T04:24:12.216530Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- CVE-2023-2829 affecting package bind for versions less than 9.16.44-1
- Details
-
A
namedinstance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option (synth-from-dnssec) enabled can be remotely terminated using a zone with a malformed NSEC record. This issue affects BIND 9 versions 9.16.8-S1 through 9.16.41-S1 and 9.18.11-S1 through 9.18.15-S1. - References