CVE-2023-6516: Specific recursive query patterns may lead to an out-of-memory condition
First published: Mon Feb 12 2024(Updated: )
Last updated 24 July 2024
Credit: security-officer@isc.org security-officer@isc.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/bind | <9.16.48 | 9.16.48 |
| debian/bind9 | 1:9.16.50-1~deb11u2 1:9.16.50-1~deb11u3 1:9.18.28-1~deb12u2 1:9.18.33-1~deb12u2 1:9.20.4-4 1:9.20.5-1 | |
| ISC BIND 9 | >=9.16.0<=9.16.45 | |
| ISC BIND 9 | =9.16.8-s1 | |
| ISC BIND 9 | =9.16.11-s1 | |
| ISC BIND 9 | =9.16.12-s1 | |
| ISC BIND 9 | =9.16.13-s1 | |
| ISC BIND 9 | =9.16.14-s1 | |
| ISC BIND 9 | =9.16.21-s1 | |
| ISC BIND 9 | =9.16.32-s1 | |
| ISC BIND 9 | =9.16.36-s1 | |
| ISC BIND 9 | =9.16.43-s1 | |
| ISC BIND 9 | =9.16.45-s1 | |
| NetApp Active IQ Unified Manager for VMware vSphere |
Remedy
Upgrade to the patched release most closely related to your current version of BIND 9: 9.16.48 or 9.16.48-S1.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2264065
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2264362
- https://access.redhat.com/errata/RHSA-2024:1647
- https://access.redhat.com/errata/RHSA-2024:1648
- https://access.redhat.com/errata/RHSA-2024:1781
- https://access.redhat.com/errata/RHSA-2024:1789
- https://access.redhat.com/errata/RHSA-2024:1800
- https://access.redhat.com/errata/RHSA-2024:1803
- https://access.redhat.com/errata/RHSA-2024:2551
- https://bugzilla.redhat.com/show_bug.cgi?id=2263911
- https://kb.isc.org/docs/cve-2023-6516
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/
- http://www.openwall.com/lists/oss-security/2024/02/13/1
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/
- https://security.netapp.com/advisory/ntap-20240503-0008/
- https://launchpad.net/bugs/cve/CVE-2023-6516
- https://security-tracker.debian.org/tracker/CVE-2023-6516
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6516
- https://nvd.nist.gov/vuln/detail/CVE-2023-6516
- https://ubuntu.com/security/CVE-2023-6516
Frequently Asked Questions
What is the severity of CVE-2023-6516?
CVE-2023-6516 has been classified as a moderate severity vulnerability.
What software is affected by CVE-2023-6516?
CVE-2023-6516 affects various versions of ISC BIND including versions from 9.16.0 up to 9.16.45.
How do I fix CVE-2023-6516?
To fix CVE-2023-6516, update ISC BIND to version 9.16.48 or later.
Can CVE-2023-6516 be exploited remotely?
Yes, CVE-2023-6516 can be exploited remotely under certain conditions.
Is there a workaround for CVE-2023-6516?
There are no known workarounds for CVE-2023-6516; updating the software is the recommended action.
- collector/oss-sec
- source/oss-sec
- alias/CVE-2023-4408
- alias/CVE-2023-5517
- alias/CVE-2023-5679
- alias/CVE-2023-6516
- alias/CVE-2023-50387
- alias/CVE-2023-50868
- agent/title
- agent/type
- agent/author
- agent/severity
- agent/first-publish-date
- agent/remedy
- collector/launchpad-cve
- source/Launchpad
- collector/mitre-cve
- source/MITRE
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- agent/software-canonical-lookup
- agent/weakness
- agent/last-modified-date
- agent/trending
- agent/source
- collector/security-tracker-debian
- source/Debian
- agent/tags
- agent/event
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- collector/nvd-cve
- package-manager/redhat
- package-manager/debian
- vendor/isc
- canonical/isc bind 9
- version/isc bind 9/9.16.0
- version/isc bind 9/9.16.45
- version/isc bind 9/9.16.8-s1
- version/isc bind 9/9.16.11-s1
- version/isc bind 9/9.16.12-s1
- version/isc bind 9/9.16.13-s1
- version/isc bind 9/9.16.14-s1
- version/isc bind 9/9.16.21-s1
- version/isc bind 9/9.16.32-s1
- version/isc bind 9/9.16.36-s1
- version/isc bind 9/9.16.43-s1
- version/isc bind 9/9.16.45-s1
- vendor/netapp
- canonical/netapp active iq unified manager for vmware vsphere