VulnerabilityModified
CVE-2023-5680
If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance.
MEDIUM 5.3EPSS 0.63%
Does this matter?
Lower severity and a low EPSS score (0.63%). Track it; it rarely justifies an emergency change on its own.
Description
If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance. This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- EPSS
- 0.63% probability · 48th percentile
- CISA KEV
- Not listed
- Affected
- isc/bind · netapp/active iq unified manager
- Source
- security-officer@isc.org
References
- https://kb.isc.org/docs/cve-2023-5680Vendor Advisory
- https://security.netapp.com/advisory/ntap-20240503-0005/Third Party Advisory
- https://kb.isc.org/docs/cve-2023-5680Vendor Advisory
- https://security.netapp.com/advisory/ntap-20240503-0005/Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.