CVE-2023-5680

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance. This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected software

Vendor	Product	Versions
ISC	BIND 9	>= 9.11.3-S1, <= 9.11.37-S1; >= 9.16.8-S1, <= 9.16.45-S1; >= 9.18.11-S1, <= 9.18.21-S1

References

https://kb.isc.org/docs/cve-2023-5680Vendor Advisory
https://security.netapp.com/advisory/ntap-20240503-0005/Third Party Advisory
https://kb.isc.org/docs/cve-2023-5680Vendor Advisory
https://security.netapp.com/advisory/ntap-20240503-0005/Third Party Advisory

Timeline

Published: Feb 13, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-56817.2A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown p CVE-2023-56829.8A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/CVE-2023-56839.8A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231010 and classified as critical. This issue affects some unknow CVE-2023-56849.8A vulnerability was found in Byzoro Smart S85F Management Platform up to 20231012. It has been declared as critical. Affected by this vulner CVE-2023-56857.5A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problem CVE-2023-56868.8Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.CVE-2023-56878.8Cross-Site Request Forgery (CSRF) in GitHub repository mosparo/mosparo prior to 1.0.3.CVE-2023-56885.4Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.CVE-2023-56895.4Cross-site Scripting (XSS) - DOM in GitHub repository modoboa/modoboa prior to 2.2.2.CVE-2023-56908.8Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.2.2.CVE-2023-56914.8The Chatbot for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in version 2.3.9 due to insuf CVE-2023-56925.3WordPress Core is vulnerable to Sensitive Information Exposure in versions up to, and including, 6.4.3 via the redirect_guess_404_permalink