Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service
WID-SEC-2024-0386 · first 14.02.2024 · updated 26.10.2026 · CVSS 7,5
What it is about
BIND (Berkeley Internet Name Domain) ist ein Open-Source-Softwarepaket, das einen Domain-Name-System-Server implementiert. Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um einen Denial of Service Angriff durchzuführen.
Under what conditions?
Over the network and without logging in. This is the most dangerous combination: attackers can scan reachable devices automatically.
What can happen in the worst case
An attacker could use the vulnerability to
- einen Denial of Service Angriff durchzuführen
Am I affected?
Affected according to the BSI:
- IBM VIOS 3.1
- IBM AIX 7.3
- IBM VIOS 4.1
- Debian Linux
- Amazon Linux 2
- FreeBSD Project FreeBSD OS
- Red Hat Enterprise Linux
- Fedora Linux
- Ubuntu Linux
- F5 BIG-IP
- SUSE Linux
- IBM SAN Volume Controller
and 30 more
The installed version is usually shown under “Help → About” or in the device’s admin interface.
What helps?
Update to at least:
- Internet Systems Consortium BIND 9.16.48
- Internet Systems Consortium BIND 9.18.24
- Internet Systems Consortium BIND 9.19.21
- Internet Systems Consortium BIND Supported Preview Edition 9.16.48-S1
- Internet Systems Consortium BIND Supported Preview Edition 9.18.24-S1
- Ubuntu Linux 22.04
- Ubuntu Linux 23.10
- Open Source PowerDNS 4.8.6
- Open Source PowerDNS 4.9.3
- Open Source PowerDNS 5.0.2
- Dell NetWorker 19.11
- Dell ECS 3.8.1.2
Is the vulnerability already being exploited?
None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.
Information and sources
- Original BSI advisory (WID)
- Red Hat Security Advisory RHSA-2024:0977 vom 2024-02-26 access.redhat.com
- Red Hat Security Advisory RHSA-2024:0982 vom 2024-02-26 access.redhat.com
- Red Hat Security Advisory RHSA-2024:0981 vom 2024-02-26 access.redhat.com
- Amazon Linux Security Advisory ALAS-2024-2481 vom 2024-03-05 alas.aws.amazon.com
- BIND Security Advisory vom 2024-02-13 kb.isc.org
- ISC Advisory kb.isc.org
- ISC Advisory kb.isc.org
- ISC Advisory kb.isc.org
- ISC Advisory kb.isc.org
- ISC Advisory kb.isc.org
- ISC Advisory kb.isc.org
- ISC Advisory kb.isc.org
- Red Hat Security Advisory RHSA-2024:1335 vom 2024-03-14 access.redhat.com
- Red Hat Security Advisory RHSA-2024:1334 vom 2024-03-14 access.redhat.com
- Debian Security Advisory DSA-5620 vom 2024-02-14 lists.debian.org
- Fedora Security Advisory FEDORA-2024-C967C7D287 vom 2024-02-14 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-2024-E24211EFF0 vom 2024-02-14 bodhi.fedoraproject.org
- Debian Security Advisory DSA-5621 vom 2024-02-14 lists.debian.org
- Fedora Security Advisory FEDORA-2024-E00ECEB11C vom 2024-02-14 bodhi.fedoraproject.org
- PowerDNS Security Advisory docs.powerdns.com
- Infoblox Security Advisory support.infoblox.com
- Debian Security Advisory DSA-5633 vom 2024-02-28 lists.debian.org
- Oracle Linux Security Advisory ELSA-2024-0977 vom 2024-02-28 linux.oracle.com
- Fedora Security Advisory FEDORA-2024-B0F9656A76 vom 2024-02-14 bodhi.fedoraproject.org
- Fedora Security Advisory FEDORA-2024-08BD07FBEB vom 2024-02-15 bodhi.fedoraproject.org
and 95 more sources in the original advisory
CVE: CVE-2023-4408, CVE-2023-50387, CVE-2023-50868, CVE-2023-5517, CVE-2023-5679, CVE-2023-5680, CVE-2023-6516
Source: BSI warning and information service (CERT-Bund); CISA. The assessment of the conditions is my reading of the BSI text; the external pages are in their original language.