VDB
BDU%3A2023-06007
BDU%3A2023-06007
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость реализации протокола DoT (DNS over TLS) DNS-сервера BIND, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Internet Systems Consortium | Debian GNU/Linux, BIND |
Timeline
- Sep 25, 2023 CVE Published
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
References
- http://www.openwall.com/lists/oss-security/2023/09/20/2 url
- https://kb.isc.org/docs/cve-2023-4236 url
- https://www.debian.org/security/2023/dsa-5504 url
- https://security-tracker.debian.org/tracker/CVE-2023-4236 url
- https://downloads.isc.org/isc/bind9/9.18.19/patches/0002-CVE-2023-4236.patch advisory
- https://downloads.isc.org/isc/bind9/9.18.19/patches/ advisory
- https://gitlab.isc.org/isc-projects/bind9/-/commit/18efa454a98759bf4f3ca806d9a6ef881ff9648d advisory