CVE-2023-5680

Cleaning an ECS-enabled cache may cause excessive CPU load

Medium · published February 13, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
49.5
In the wild
Unconfirmed
What it is

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance.

This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00629 · 49.5th percentile
Published
2024-02-13T14:05Z
EPSS history
Timeline
  • 13 FEB 14:05Z
    Cleaning an ECS-enabled cache may cause excessive CPU load
    cvelistv5