CVE-2023-5680

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Feb 13, 2024

Summary

CVE-2023-5680 is a cyber vulnerability that affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1, which are DNS server software products developed by ISC (Internet Systems Consortium). This vulnerability occurs when a resolver cache contains a large number of ECS (EDNS Client Subnet) records for the same name, causing a significant degradation in query performance during the cleaning process of the cache database node for that name. The risk score associated with this vulnerability is 26, indicating a medium severity level with low attack complexity and low availability impact. No privileges or user interaction are required to exploit this vulnerability, and it does not have any confidentiality or integrity impact on the affected systems. The provided source for this information is [email protected], and the CVE ID name is CVE-2023-5680

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-5680 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options