wid-sec-w-2023-1533
Vulnerability from csaf_certbund
Published
2023-06-21 22:00
Modified
2024-04-11 22:00
Summary
Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung
BIND (Berkeley Internet Name Domain) ist ein Open-Source-Softwarepaket, das einen Domain-Name-System-Server implementiert.
Ubuntu Linux ist die Linux Distribution des Herstellers Canonical.
Network Identity Operating System (NIOS) ist das Betriebssystem von Infoblox Netzwerkprodukten.
Infoblox DDI ist ein Verwaltungsserver für Netzwerkadressen mit DNS und DHCP-Server.
Angriff
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um einen Denial of Service Angriff durchzuführen.
Betroffene Betriebssysteme
- Linux
- Sonstiges
- UNIX
- Windows
{ "document": { "aggregate_severity": { "text": "mittel" }, "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "de-DE", "notes": [ { "category": "legal_disclaimer", "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen." }, { "category": "description", "text": "BIND (Berkeley Internet Name Domain) ist ein Open-Source-Softwarepaket, das einen Domain-Name-System-Server implementiert.\r\nUbuntu Linux ist die Linux Distribution des Herstellers Canonical.\r\nNetwork Identity Operating System (NIOS) ist das Betriebssystem von Infoblox Netzwerkprodukten.\r\nInfoblox DDI ist ein Verwaltungsserver f\u00fcr Netzwerkadressen mit DNS und DHCP-Server.", "title": "Produktbeschreibung" }, { "category": "summary", "text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.", "title": "Angriff" }, { "category": "general", "text": "- Linux\n- Sonstiges\n- UNIX\n- Windows", "title": "Betroffene Betriebssysteme" } ], "publisher": { "category": "other", "contact_details": "csaf-provider@cert-bund.de", "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik", "namespace": "https://www.bsi.bund.de" }, "references": [ { "category": "self", "summary": "WID-SEC-W-2023-1533 - CSAF Version", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-1533.json" }, { "category": "self", "summary": "WID-SEC-2023-1533 - Portal Version", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1533" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2023:2954-1 vom 2024-02-27", "url": "https://lists.suse.com/pipermail/sle-security-updates/2024-February/018035.html" }, { "category": "external", "summary": "ISC Security Advisory vom 2023-06-21", "url": "https://kb.isc.org/docs/cve-2023-2828" }, { "category": "external", "summary": "ISC Security Advisory vom 2023-06-21", "url": "https://kb.isc.org/docs/cve-2023-2829" }, { "category": "external", "summary": "ISC Security Advisory vom 2023-06-21", "url": "https://kb.isc.org/docs/cve-2023-2911" }, { "category": "external", "summary": "Ubuntu Security Notice", "url": "https://ubuntu.com/security/notices/USN-6183-1" }, { "category": "external", "summary": "Infoblox Advisory", "url": "https://support.infoblox.com/s/article/000009010" }, { "category": "external", "summary": "Infoblox Advisory", "url": "https://support.infoblox.com/s/article/000009014" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2023-8E1DDB1FA2 vom 2023-06-23", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-8e1ddb1fa2" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2023-C0FF5A2F68 vom 2023-06-23", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-c0ff5a2f68" }, { "category": "external", "summary": "Fedora Security Advisory FEDORA-2023-1D526D551C vom 2023-06-23", "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2023-1d526d551c" }, { "category": "external", "summary": "Debian Security Advisory DSA-5439 vom 2023-06-25", "url": "https://lists.debian.org/debian-security-announce/2023/msg00131.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2023:2667-1 vom 2023-06-28", "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-June/015348.html" }, { "category": "external", "summary": "NetApp Security Advisory NTAP-20230703-0010 vom 2023-07-03", "url": "https://security.netapp.com/advisory/ntap-20230703-0010/" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2023:2789-1 vom 2023-07-06", "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-July/015457.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2023:2793-1 vom 2023-07-07", "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-July/015459.html" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2023:2794-1 vom 2023-07-07", "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-July/015458.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:4005 vom 2023-07-10", "url": "https://access.redhat.com/errata/RHSA-2023:4005" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:4037 vom 2023-07-12", "url": "https://access.redhat.com/errata/RHSA-2023:4037" }, { "category": "external", "summary": "SUSE Security Update SUSE-SU-2023:2836-1 vom 2023-07-14", "url": "https://lists.suse.com/pipermail/sle-security-updates/2023-July/015499.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:4102 vom 2023-07-18", "url": "https://access.redhat.com/errata/RHSA-2023:4102" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:4099 vom 2023-07-18", "url": "https://access.redhat.com/errata/RHSA-2023:4099" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:4101 vom 2023-07-18", "url": "https://access.redhat.com/errata/RHSA-2023:4101" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:4100 vom 2023-07-18", "url": "https://access.redhat.com/errata/RHSA-2023:4100" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:4152 vom 2023-07-18", "url": "https://access.redhat.com/errata/RHSA-2023:4152" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:4153 vom 2023-07-18", "url": "https://access.redhat.com/errata/RHSA-2023:4153" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:4154 vom 2023-07-18", "url": "https://access.redhat.com/errata/RHSA-2023:4154" }, { "category": "external", "summary": "Ubuntu Security Notice USN-6183-2 vom 2023-07-18", "url": "https://ubuntu.com/security/notices/USN-6183-2" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2023-4100 vom 2023-07-20", "url": "https://linux.oracle.com/errata/ELSA-2023-4100.html" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALAS-2023-2112 vom 2023-07-20", "url": "https://alas.aws.amazon.com/AL2/ALAS-2023-2112.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2023-4102 vom 2023-07-20", "url": "https://linux.oracle.com/errata/ELSA-2023-4102.html" }, { "category": "external", "summary": "Amazon Linux Security Advisory ALAS-2023-1789 vom 2023-07-26", "url": "https://alas.aws.amazon.com/ALAS-2023-1789.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:4225 vom 2023-07-27", "url": "https://access.redhat.com/errata/RHSA-2023:4225" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:4332 vom 2023-07-31", "url": "https://access.redhat.com/errata/RHSA-2023:4332" }, { "category": "external", "summary": "CentOS Security Advisory CESA-2023:4152 vom 2023-08-03", "url": "https://lists.centos.org/pipermail/centos-announce/2023-August/086414.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2023-4152 vom 2023-08-10", "url": "https://oss.oracle.com/pipermail/el-errata/2023-August/014400.html" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2023-4099 vom 2023-08-10", "url": "https://oss.oracle.com/pipermail/el-errata/2023-August/014283.html" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:4625 vom 2023-08-11", "url": "https://access.redhat.com/errata/RHSA-2023:4625" }, { "category": "external", "summary": "Red Hat Security Advisory RHSA-2023:4624 vom 2023-08-11", "url": "https://access.redhat.com/errata/RHSA-2023:4624" }, { "category": "external", "summary": "IBM Security Bulletin 7030969 vom 2023-09-07", "url": "https://www.ibm.com/support/pages/node/7030969" }, { "category": "external", "summary": "IBM Security Bulletin 7148094 vom 2024-04-11", "url": "https://www.ibm.com/support/pages/node/7148094" }, { "category": "external", "summary": "Oracle Linux Security Advisory ELSA-2024-1781 vom 2024-04-12", "url": "https://linux.oracle.com/errata/ELSA-2024-1781.html" } ], "source_lang": "en-US", "title": "Internet Systems Consortium BIND: Mehrere Schwachstellen erm\u00f6glichen Denial of Service", "tracking": { "current_release_date": "2024-04-11T22:00:00.000+00:00", "generator": { "date": "2024-04-22T08:41:10.927+00:00", "engine": { "name": "BSI-WID", "version": "1.3.0" } }, "id": "WID-SEC-W-2023-1533", "initial_release_date": "2023-06-21T22:00:00.000+00:00", "revision_history": [ { "date": "2023-06-21T22:00:00.000+00:00", "number": "1", "summary": "Initiale Fassung" }, { "date": "2023-06-22T22:00:00.000+00:00", "number": "2", "summary": "Neue Updates von Fedora aufgenommen" }, { "date": "2023-06-25T22:00:00.000+00:00", "number": "3", "summary": "Neue Updates von Debian aufgenommen" }, { "date": "2023-06-28T22:00:00.000+00:00", "number": "4", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2023-07-03T22:00:00.000+00:00", "number": "5", "summary": "Neue Updates von NetApp aufgenommen" }, { "date": "2023-07-06T22:00:00.000+00:00", "number": "6", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2023-07-09T22:00:00.000+00:00", "number": "7", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2023-07-10T22:00:00.000+00:00", "number": "8", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2023-07-12T22:00:00.000+00:00", "number": "9", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2023-07-16T22:00:00.000+00:00", "number": "10", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2023-07-17T22:00:00.000+00:00", "number": "11", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2023-07-18T22:00:00.000+00:00", "number": "12", "summary": "Neue Updates von Ubuntu aufgenommen" }, { "date": "2023-07-19T22:00:00.000+00:00", "number": "13", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2023-07-20T22:00:00.000+00:00", "number": "14", "summary": "Neue Updates von Amazon und Oracle Linux aufgenommen" }, { "date": "2023-07-25T22:00:00.000+00:00", "number": "15", "summary": "Neue Updates von Amazon aufgenommen" }, { "date": "2023-07-26T22:00:00.000+00:00", "number": "16", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2023-07-31T22:00:00.000+00:00", "number": "17", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2023-08-03T22:00:00.000+00:00", "number": "18", "summary": "Neue Updates von CentOS aufgenommen" }, { "date": "2023-08-10T22:00:00.000+00:00", "number": "19", "summary": "Neue Updates von Oracle Linux aufgenommen" }, { "date": "2023-08-13T22:00:00.000+00:00", "number": "20", "summary": "Neue Updates von Red Hat aufgenommen" }, { "date": "2023-09-07T22:00:00.000+00:00", "number": "21", "summary": "Neue Updates von IBM aufgenommen" }, { "date": "2024-02-27T23:00:00.000+00:00", "number": "22", "summary": "Neue Updates von SUSE aufgenommen" }, { "date": "2024-04-11T22:00:00.000+00:00", "number": "23", "summary": "Neue Updates von IBM und Oracle Linux aufgenommen" } ], "status": "final", "version": "23" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Amazon Linux 2", "product": { "name": "Amazon Linux 2", "product_id": "398363", "product_identification_helper": { "cpe": "cpe:/o:amazon:linux_2:-" } } } ], "category": "vendor", "name": "Amazon" }, { "branches": [ { "category": "product_name", "name": "Debian Linux", "product": { "name": "Debian Linux", "product_id": "2951", "product_identification_helper": { "cpe": "cpe:/o:debian:debian_linux:-" } } } ], "category": "vendor", "name": "Debian" }, { "branches": [ { "category": "product_name", "name": "Fedora Linux", "product": { "name": "Fedora Linux", "product_id": "74185", "product_identification_helper": { "cpe": "cpe:/o:fedoraproject:fedora:-" } } } ], "category": "vendor", "name": "Fedora" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "7.2", "product": { "name": "IBM AIX 7.2", "product_id": "434967", "product_identification_helper": { "cpe": "cpe:/o:ibm:aix:7.2" } } }, { "category": "product_version", "name": "7.3", "product": { "name": "IBM AIX 7.3", "product_id": "T029653", "product_identification_helper": { "cpe": "cpe:/o:ibm:aix:7.3" } } } ], "category": "product_name", "name": "AIX" }, { "branches": [ { "category": "product_version", "name": "7.5", "product": { "name": "IBM QRadar SIEM 7.5", "product_id": "T022954", "product_identification_helper": { "cpe": "cpe:/a:ibm:qradar_siem:7.5" } } } ], "category": "product_name", "name": "QRadar SIEM" }, { "branches": [ { "category": "product_version", "name": "3.1", "product": { "name": "IBM VIOS 3.1", "product_id": "1039165", "product_identification_helper": { "cpe": "cpe:/a:ibm:vios:3.1" } } } ], "category": "product_name", "name": "VIOS" } ], "category": "vendor", "name": "IBM" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "bloxone", "product": { "name": "Infoblox DDI bloxone", "product_id": "T028257", "product_identification_helper": { "cpe": "cpe:/a:infoblox:ddi:bloxone" } } } ], "category": "product_name", "name": "DDI" }, { "branches": [ { "category": "product_version_range", "name": "\u003c=9.0.0", "product": { "name": "Infoblox NIOS \u003c=9.0.0", "product_id": "T028255", "product_identification_helper": { "cpe": "cpe:/o:infoblox:nios:9.0.0" } } }, { "category": "product_version_range", "name": "\u003c=8.6.2", "product": { "name": "Infoblox NIOS \u003c=8.6.2", "product_id": "T028256", "product_identification_helper": { "cpe": "cpe:/o:infoblox:nios:8.6.2" } } } ], "category": "product_name", "name": "NIOS" } ], "category": "vendor", "name": "Infoblox" }, { "branches": [ { "branches": [ { "category": "product_version_range", "name": "\u003c9.16.42", "product": { "name": "Internet Systems Consortium BIND \u003c9.16.42", "product_id": "T028252", "product_identification_helper": { "cpe": "cpe:/a:isc:bind:9.16.42" } } }, { "category": "product_version_range", "name": "\u003c9.18.16", "product": { "name": "Internet Systems Consortium BIND \u003c9.18.16", "product_id": "T028253", "product_identification_helper": { "cpe": "cpe:/a:isc:bind:9.18.16" } } }, { "category": "product_version_range", "name": "\u003c9.19.14", "product": { "name": "Internet Systems Consortium BIND \u003c9.19.14", "product_id": "T028254", "product_identification_helper": { "cpe": "cpe:/a:isc:bind:9.19.14" } } }, { "category": "product_version_range", "name": "\u003c9.16.42-S1", "product": { "name": "Internet Systems Consortium BIND \u003c9.16.42-S1", "product_id": "T028265", "product_identification_helper": { "cpe": "cpe:/a:isc:bind:9.16.42-s1" } } }, { "category": "product_version_range", "name": "\u003c9.18.16-S1", "product": { "name": "Internet Systems Consortium BIND \u003c9.18.16-S1", "product_id": "T028266", "product_identification_helper": { "cpe": "cpe:/a:isc:bind:9.18.16-s1" } } } ], "category": "product_name", "name": "BIND" } ], "category": "vendor", "name": "Internet Systems Consortium" }, { "branches": [ { "category": "product_name", "name": "NetApp ActiveIQ Unified Manager", "product": { "name": "NetApp ActiveIQ Unified Manager", "product_id": "T026333", "product_identification_helper": { "cpe": "cpe:/a:netapp:active_iq_unified_manager:vmware_vsphere" } } } ], "category": "vendor", "name": "NetApp" }, { "branches": [ { "category": "product_name", "name": "Open Source CentOS", "product": { "name": "Open Source CentOS", "product_id": "1727", "product_identification_helper": { "cpe": "cpe:/o:centos:centos:-" } } } ], "category": "vendor", "name": "Open Source" }, { "branches": [ { "category": "product_name", "name": "Oracle Linux", "product": { "name": "Oracle Linux", "product_id": "T004914", "product_identification_helper": { "cpe": "cpe:/o:oracle:linux:-" } } } ], "category": "vendor", "name": "Oracle" }, { "branches": [ { "category": "product_name", "name": "Red Hat Enterprise Linux", "product": { "name": "Red Hat Enterprise Linux", "product_id": "67646", "product_identification_helper": { "cpe": "cpe:/o:redhat:enterprise_linux:-" } } } ], "category": "vendor", "name": "Red Hat" }, { "branches": [ { "category": "product_name", "name": "SUSE Linux", "product": { "name": "SUSE Linux", "product_id": "T002207", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_linux:-" } } } ], "category": "vendor", "name": "SUSE" }, { "branches": [ { "branches": [ { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T000126", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } }, { "category": "product_name", "name": "Ubuntu Linux", "product": { "name": "Ubuntu Linux", "product_id": "T016400", "product_identification_helper": { "cpe": "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category": "product_name", "name": "Linux" } ], "category": "vendor", "name": "Ubuntu" } ] }, "vulnerabilities": [ { "cve": "CVE-2023-2828", "notes": [ { "category": "description", "text": "Es existiert eine Schwachstelle in Internet Systems Consortium BIND. Die Effektivit\u00e4t des in named verwendeten Cache-Cleaning-Algorithmus kann durch die Abfrage des Resolvers nach bestimmten RR-Sets in einer bestimmten Reihenfolge stark vermindert werden. Dadurch kann die konfigurierte Grenze f\u00fcr die maximale Cache-Gr\u00f6\u00dfe deutlich \u00fcberschritten werden. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "67646", "434967", "1039165", "T004914", "T016400", "74185", "T022954", "2951", "T002207", "T000126", "398363", "1727", "T028257", "T026333", "T029653" ], "last_affected": [ "T028255", "T028256" ] }, "release_date": "2023-06-21T22:00:00Z", "title": "CVE-2023-2828" }, { "cve": "CVE-2023-2829", "notes": [ { "category": "description", "text": "Es existiert eine Schwachstelle in Internet Systems Consortium BIND. Eine benannte Instanz, die so konfiguriert ist, dass sie als DNSSEC-validierender rekursiver Resolver mit aktivierter Option \"Aggressive Use of DNSSEC-Validated Cache\" l\u00e4uft, kann aus der Ferne mit einem fehlerhaften NSEC-record beendet werden. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "67646", "434967", "1039165", "T004914", "74185", "T022954", "2951", "T002207", "T000126", "398363", "1727", "T026333", "T029653" ] }, "release_date": "2023-06-21T22:00:00Z", "title": "CVE-2023-2829" }, { "cve": "CVE-2023-2911", "notes": [ { "category": "description", "text": "Es existiert eine Schwachstelle in Internet Systems Consortium BIND. Eine Sequenz von serve-stale-bezogenen Lookups kann dazu f\u00fchren, dass named eine Schleife bildet und aufgrund eines Stack-\u00dcberlaufs unerwartet beendet wird. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um einen Denial of Service zu verursachen." } ], "product_status": { "known_affected": [ "67646", "434967", "1039165", "T004914", "T016400", "74185", "T022954", "2951", "T002207", "T000126", "398363", "1727", "T026333", "T029653" ] }, "release_date": "2023-06-21T22:00:00Z", "title": "CVE-2023-2911" } ] }
Loading...
Loading...
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.