Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cloudfoundryCloud FoundryCFOUNDRY:10C8B286A719387559C4C262F658951E
HistoryDec 04, 2023 - 12:00 a.m.

USN-6421-1: Bind vulnerability | Cloud Foundry

2023-12-0400:00:00
Cloud Foundry
www.cloudfoundry.org
6
bind
vulnerability
canonical ubuntu
16.04
18.04
cloud foundry
medium severity
denial of service
cve-2023-3341
mitigation
update
usn-6421-1
cf deployment

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.9%

JSON

Severity

Medium

Vendor

Canonical Ubuntu

Versions Affected

  • Canonical Ubuntu 16.04
  • Canonical Ubuntu 18.04

Description

It was discovered that Bind incorrectly handled certain control channel messages. A remote attacker with access to the control channel could possibly use this issue to cause Bind to crash, resulting in a denial of service. Update Instructions: Run sudo pro fix USN-6421-1 to fix the vulnerability. The problem can be corrected by updating your system to the following package versions: libisc160 – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 libisccc-export140-udeb – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 libdns162 – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 libbind-dev – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 libbind9-140 – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 libisccc-export140 – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 libisccfg-export140 – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 bind9 – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 libisc-export160 – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 bind9-doc – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 libbind-export-dev – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 libisccc140 – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 host – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 libisccfg140 – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 bind9-host – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 dnsutils – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 libdns-export162 – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 bind9utils – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 liblwres141 – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 libirs141 – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 libirs-export141 – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 lwresd – 1:9.10.3.dfsg.P4-8ubuntu1.19+esm7 Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro

CVEs contained in this USN include: CVE-2023-3341.

Affected Cloud Foundry Products and Versions

Severity is medium unless otherwise noted.

  • CF Deployment
    • All versions prior to 30.0.0

Mitigation

Users of affected products are strongly encouraged to follow the mitigations below. The Cloud Foundry project recommends upgrading the following releases:

  • CF Deployment
    • Upgrade all versions to 30.0.0 or greater

References

History

2023-12-04: Initial vulnerability report published.

Affected configurations

Vulners
Node
cloudfoundrycf-deploymentRange<30.0.0
CPENameOperatorVersion
cf deploymentlt30.0.0

Related

nessus 58
rocky 1
openvas 37
almalinux 3
aix 1
centos 1
cvelist 1
osv 9
redhatcve 1
alpinelinux 1
veracode 1
ibm 13
redhat 40
oraclelinux 4
amazon 2
debiancve 1
ubuntu 2
debian 2
slackware 1
f5 1
prion 1
cloudlinux 1
cve 1
nvd 1
ubuntucve 1
cbl_mariner 1
fedora 6
rosalinux 1
mageia 1
redos 1
photon 2
cloudfoundry 1
thn 1
nessus
nessus
AlmaLinux 8 : bind (ALSA-2023:5474)
2023-10-06 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : bind (SUSE-SU-2023:3821-1)
2023-09-28 00:00:00
Amazon Linux AMI : bind (ALAS-2023-1845)
2023-10-06 00:00:00
rocky
rocky
bind security update
2023-10-14 02:08:30
openvas
openvas
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2024-1395)
2024-03-21 00:00:00
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2024-1673)
2024-05-17 00:00:00
openSUSE: Security Advisory for bind (SUSE-SU-2023:3821-1)
2024-03-04 00:00:00
almalinux
almalinux
Important: bind security update
2023-10-12 00:00:00
Important: bind security update
2023-10-05 00:00:00
Important: bind9.16 security update
2023-10-05 00:00:00
aix
aix
AIX is vulnerable to denial of service due to ISC BIND
2023-12-18 09:19:46
centos
centos
bind security update
2024-01-12 19:23:37
cvelist
cvelist
CVE-2023-3341 A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly
2023-09-20 12:32:03
osv
osv
Important: bind security update
2023-10-14 02:08:30
bind9 vulnerability
2023-10-09 11:15:15
CVE-2023-3341
2023-09-20 13:15:11
redhatcve
redhatcve
CVE-2023-3341
2023-09-20 15:56:02
alpinelinux
alpinelinux
CVE-2023-3341
2023-09-20 13:15:11
veracode
veracode
Denial Of Service (DoS)
2023-10-02 16:07:04
ibm
ibm
Security Bulletin: IBM Spectrum Symphony with ISC BIND is vulnerable to a denial of service
2024-02-13 19:30:26
Security Bulletin: AIX is vulnerable to denial of service due to ISC BIND (CVE-2023-3341)
2023-12-18 16:32:51
Security Bulletin: IBM Spectrum Conductor with ISC BIND is vulnerable to a denial of service
2024-02-13 19:30:43
redhat
redhat
(RHSA-2023:5689) Important: bind security update
2023-10-12 14:32:23
(RHSA-2023:5691) Important: bind security update
2023-10-12 14:33:55
(RHSA-2023:5526) Important: bind security update
2023-10-09 09:35:07
oraclelinux
oraclelinux
bind security update
2023-10-13 00:00:00
bind9.16 security update
2023-10-06 00:00:00
bind security update
2023-10-06 00:00:00
amazon
amazon
Important: bind
2023-09-27 22:15:00
Important: bind
2023-09-27 22:48:00
debiancve
debiancve
CVE-2023-3341
2023-09-20 13:15:11
ubuntu
ubuntu
Bind vulnerability
2023-10-09 00:00:00
Bind vulnerabilities
2023-09-20 00:00:00
debian
debian
[SECURITY] [DLA 3726-1] bind9 security update
2024-01-30 21:43:57
[SECURITY] [DSA 5504-1] bind9 security update
2023-09-22 20:15:19
slackware
slackware
[slackware-security] bind
2023-09-21 19:42:39
f5
f5
K000137582 : BIND vulnerability CVE-2023-3341
2023-11-15 00:00:00
prion
prion
Code injection
2023-09-20 13:15:00
cloudlinux
cloudlinux
bind: Fix of CVE-2023-3341
2023-10-12 18:43:57
cve
cve
CVE-2023-3341
2023-09-20 13:15:11
nvd
nvd
CVE-2023-3341
2023-09-20 13:15:11
ubuntucve
ubuntucve
CVE-2023-3341
2023-09-20 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-3341 affecting package bind for versions less than 9.16.44-1
2024-07-05 21:08:40
fedora
fedora
[SECURITY] Fedora 37 Update: bind-9.18.19-1.fc37
2023-10-11 01:34:00
[SECURITY] Fedora 37 Update: bind-dyndb-ldap-11.10-17.fc37
2023-10-11 01:34:01
[SECURITY] Fedora 39 Update: bind-9.18.19-1.fc39
2023-11-03 18:51:08
rosalinux
rosalinux
Advisory ROSA-SA-2023-2279
2023-10-24 13:59:56
mageia
mageia
Updated bind packages fix security vulnerabilities
2023-10-28 00:49:40
redos
redos
ROS-20240611-12
2024-06-11 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0481
2023-09-29 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0661
2023-10-05 00:00:00
cloudfoundry
cloudfoundry
USN-6390-1: Bind vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
thn
thn
High-Severity Flaws Uncovered in Atlassian Products and ISC BIND Server
2023-09-22 08:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.9%

JSON
Related for CFOUNDRY:10C8B286A719387559C4C262F658951E
nessus58rocky1openvas37almalinux3aix1centos1cvelist1osv9redhatcve1alpinelinux1veracode1ibm13redhat40oraclelinux4amazon2debiancve1ubuntu2debian2slackware1f51prion1cloudlinux1cve1nvd1ubuntucve1cbl_mariner1fedora6rosalinux1mageia1redos1photon2cloudfoundry1thn1