CVE-2023-3341 A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly
Remote attackers can crash the BIND DNS server via stack exhaustion in control channel message parsing without authentication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-3341?
CVE-2023-3341 is a high-severity denial of service vulnerability in Debian Debian Linux, published on 20 Sep 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1.
Which versions are affected by CVE-2023-3341?
It affects 3 products.
Linux distribution packages (40)
bind AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind-chroot AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind-devel AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind-export-devel AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind-export-libs AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind-libs AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind-libs-lite AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind-license AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind-lite-devel AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind-pkcs11 AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind-pkcs11-devel AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind-pkcs11-libs AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind-pkcs11-utils AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind-sdb AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind-sdb-chroot AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind-utils AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
bind9.16 AlmaLinux:8 | All versions | 32:9.16.23-0.14.el8_8.2.alma.1 |
bind9.16-chroot AlmaLinux:8 | All versions | 32:9.16.23-0.14.el8_8.2.alma.1 |
bind9.16-devel AlmaLinux:8 | All versions | 32:9.16.23-0.14.el8_8.2.alma.1 |
bind9.16-dnssec-utils AlmaLinux:8 | All versions | 32:9.16.23-0.14.el8_8.2.alma.1 |
bind9.16-doc AlmaLinux:8 | All versions | 32:9.16.23-0.14.el8_8.2.alma.1 |
bind9.16-libs AlmaLinux:8 | All versions | 32:9.16.23-0.14.el8_8.2.alma.1 |
bind9.16-license AlmaLinux:8 | All versions | 32:9.16.23-0.14.el8_8.2.alma.1 |
bind9.16-utils AlmaLinux:8 | All versions | 32:9.16.23-0.14.el8_8.2.alma.1 |
python3-bind AlmaLinux:8 | All versions | 32:9.11.36-8.el8_8.2 |
python3-bind9.16 AlmaLinux:8 | All versions | 32:9.16.23-0.14.el8_8.2.alma.1 |
bind AlmaLinux:9 | All versions | 32:9.16.23-11.el9_2.2 |
bind-chroot AlmaLinux:9 | All versions | 32:9.16.23-11.el9_2.2 |
bind-devel AlmaLinux:9 | All versions | 32:9.16.23-11.el9_2.2 |
bind-dnssec-doc AlmaLinux:9 | All versions | 32:9.16.23-11.el9_2.2 |
bind-dnssec-utils AlmaLinux:9 | All versions | 32:9.16.23-11.el9_2.2 |
bind-doc AlmaLinux:9 | All versions | 32:9.16.23-11.el9_2.2 |
bind-libs AlmaLinux:9 | All versions | 32:9.16.23-11.el9_2.2 |
bind-license AlmaLinux:9 | All versions | 32:9.16.23-11.el9_2.2 |
bind-utils AlmaLinux:9 | All versions | 32:9.16.23-11.el9_2.2 |
python3-bind AlmaLinux:9 | All versions | 32:9.16.23-11.el9_2.2 |
bind Red Hat:enterprise_linux:7::client | All versions | 32:9.11.4-26.P2.el7_9.15 |
bind-chroot Red Hat:enterprise_linux:7::client | All versions | 32:9.11.4-26.P2.el7_9.15 |
bind-debuginfo Red Hat:enterprise_linux:7::client | All versions | 32:9.11.4-26.P2.el7_9.15 |
bind-devel Red Hat:enterprise_linux:7::client | All versions | 32:9.11.4-26.P2.el7_9.15 |
Products include Debian Debian Linux, Fedoraproject Fedora, Isc Bind.
How do I fix CVE-2023-3341?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2023-3341 being exploited?
There is no known exploitation of CVE-2023-3341 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALPINE-CVE-2023-3341, ALSA-2023:5460, ALSA-2023:5474, ALSA-2023:5689, AZL-29943, AZL-34562 and 31 more.