Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM92EB7CEC4DDCB914290133ED886D12CD28500D1305EA84412480C6F0CD8A3D21
HistoryApr 26, 2024 - 11:06 a.m.

Security Bulletin: Vulnerability in BIND affects IBM Integrated Analytics System [CVE-2023-3341]

2024-04-2611:06:04
www.ibm.com
15
ibm integrated analytics system
vulnerability
bind
7.9.23.12.sp23
fix central

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.9%

JSON

Summary

Redhat provided BIND is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE [CVE-2023-3341]

Vulnerability Details

CVEID:CVE-2023-3341
**DESCRIPTION:**ISC BIND is vulnerable to a denial of service, caused by a stack exhaustion flaw in control channel code. By sending a specially crafted message over the control channel, a remote attacker could exploit this vulnerability to cause named to terminate.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/266515 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Affected Products and Versions

Affected Product(s) Version(s)
IBM Integrated Analytics System 1.0.0-1.0.28.1

Remediation/Fixes

IBM has fixed the vulnerability in “7.9.23.12.SP23” security patch release. IBM strongly recommends addressing this vulnerability by upgrading to “7.9.23.12.SP23” or to the latest security patch release.

Affected Product(s) VRMF Remediation/Fixes
IBM Integrated Analytics System 7.9.23.12.SP23 Link to Fix Central

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibmsmart_analytics_system_7710Matchany
CPENameOperatorVersion
ibm integrated analytics systemeqany

Related

nessus 58
rocky 1
openvas 37
almalinux 3
aix 1
centos 1
cvelist 1
osv 9
redhatcve 1
alpinelinux 1
veracode 1
ibm 12
redhat 40
oraclelinux 4
debiancve 1
amazon 2
ubuntu 2
debian 2
slackware 1
f5 1
prion 1
cloudfoundry 2
cloudlinux 1
cve 1
nvd 1
ubuntucve 1
cbl_mariner 1
fedora 6
redos 1
mageia 1
rosalinux 1
photon 2
thn 1
nessus
nessus
AlmaLinux 8 : bind (ALSA-2023:5474)
2023-10-06 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : bind (SUSE-SU-2023:3821-1)
2023-09-28 00:00:00
Amazon Linux AMI : bind (ALAS-2023-1845)
2023-10-06 00:00:00
rocky
rocky
bind security update
2023-10-14 02:08:30
openvas
openvas
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2024-1395)
2024-03-21 00:00:00
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2024-1673)
2024-05-17 00:00:00
openSUSE: Security Advisory for bind (SUSE-SU-2023:3821-1)
2024-03-04 00:00:00
almalinux
almalinux
Important: bind security update
2023-10-12 00:00:00
Important: bind security update
2023-10-05 00:00:00
Important: bind9.16 security update
2023-10-05 00:00:00
aix
aix
AIX is vulnerable to denial of service due to ISC BIND
2023-12-18 09:19:46
centos
centos
bind security update
2024-01-12 19:23:37
cvelist
cvelist
CVE-2023-3341 A stack exhaustion flaw in control channel code may cause named to terminate unexpectedly
2023-09-20 12:32:03
osv
osv
Important: bind security update
2023-10-14 02:08:30
bind9 vulnerability
2023-10-09 11:15:15
CVE-2023-3341
2023-09-20 13:15:11
redhatcve
redhatcve
CVE-2023-3341
2023-09-20 15:56:02
alpinelinux
alpinelinux
CVE-2023-3341
2023-09-20 13:15:11
veracode
veracode
Denial Of Service (DoS)
2023-10-02 16:07:04
ibm
ibm
Security Bulletin: IBM Spectrum Symphony with ISC BIND is vulnerable to a denial of service
2024-02-13 19:30:26
Security Bulletin: AIX is vulnerable to denial of service due to ISC BIND (CVE-2023-3341)
2023-12-18 16:32:51
Security Bulletin: IBM Spectrum Conductor with ISC BIND is vulnerable to a denial of service
2024-02-13 19:30:43
redhat
redhat
(RHSA-2023:5689) Important: bind security update
2023-10-12 14:32:23
(RHSA-2023:5691) Important: bind security update
2023-10-12 14:33:55
(RHSA-2023:5526) Important: bind security update
2023-10-09 09:35:07
oraclelinux
oraclelinux
bind security update
2023-10-13 00:00:00
bind9.16 security update
2023-10-06 00:00:00
bind security update
2023-10-06 00:00:00
debiancve
debiancve
CVE-2023-3341
2023-09-20 13:15:11
amazon
amazon
Important: bind
2023-09-27 22:15:00
Important: bind
2023-09-27 22:48:00
ubuntu
ubuntu
Bind vulnerability
2023-10-09 00:00:00
Bind vulnerabilities
2023-09-20 00:00:00
debian
debian
[SECURITY] [DLA 3726-1] bind9 security update
2024-01-30 21:43:57
[SECURITY] [DSA 5504-1] bind9 security update
2023-09-22 20:15:19
slackware
slackware
[slackware-security] bind
2023-09-21 19:42:39
f5
f5
K000137582 : BIND vulnerability CVE-2023-3341
2023-11-15 00:00:00
prion
prion
Code injection
2023-09-20 13:15:00
cloudfoundry
cloudfoundry
USN-6421-1: Bind vulnerability | Cloud Foundry
2023-12-04 00:00:00
USN-6390-1: Bind vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
cloudlinux
cloudlinux
bind: Fix of CVE-2023-3341
2023-10-12 18:43:57
cve
cve
CVE-2023-3341
2023-09-20 13:15:11
nvd
nvd
CVE-2023-3341
2023-09-20 13:15:11
ubuntucve
ubuntucve
CVE-2023-3341
2023-09-20 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-3341 affecting package bind for versions less than 9.16.44-1
2024-07-05 21:08:40
fedora
fedora
[SECURITY] Fedora 39 Update: bind-dyndb-ldap-11.10-21.fc39
2023-11-03 18:51:08
[SECURITY] Fedora 37 Update: bind-9.18.19-1.fc37
2023-10-11 01:34:00
[SECURITY] Fedora 37 Update: bind-dyndb-ldap-11.10-17.fc37
2023-10-11 01:34:01
redos
redos
ROS-20240611-12
2024-06-11 00:00:00
mageia
mageia
Updated bind packages fix security vulnerabilities
2023-10-28 00:49:40
rosalinux
rosalinux
Advisory ROSA-SA-2023-2279
2023-10-24 13:59:56
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0481
2023-09-29 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0661
2023-10-05 00:00:00
thn
thn
High-Severity Flaws Uncovered in Atlassian Products and ISC BIND Server
2023-09-22 08:00:00

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.9%

JSON
Related for 92EB7CEC4DDCB914290133ED886D12CD28500D1305EA84412480C6F0CD8A3D21
nessus58rocky1openvas37almalinux3aix1centos1cvelist1osv9redhatcve1alpinelinux1veracode1ibm12redhat40oraclelinux4debiancve1amazon2ubuntu2debian2slackware1f51prion1cloudfoundry2cloudlinux1cve1nvd1ubuntucve1cbl_mariner1fedora6redos1mageia1rosalinux1photon2thn1