If the `recursive-clients` quota is reached on a BIND 9...
High severity
Unreviewed
Published
Jun 21, 2023
to the GitHub Advisory Database
•
Updated Apr 4, 2024
Description
Published by the National Vulnerability Database
Jun 21, 2023
Published to the GitHub Advisory Database
Jun 21, 2023
Last updated
Apr 4, 2024
If the
recursive-clients
quota is reached on a BIND 9 resolver configured with bothstale-answer-enable yes;
andstale-answer-client-timeout 0;
, a sequence of serve-stale-related lookups could causenamed
to loop and terminate unexpectedly due to a stack overflow.This issue affects BIND 9 versions 9.16.33 through 9.16.41, 9.18.7 through 9.18.15, 9.16.33-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.
References