CVE-2023-5679
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-5679 is a newly disclosed vulnerability that can lead to `named` crashing with an assertion failure during recursive resolution in BIND 9 versions 9.16.12 through 9.19.19, as well as 9.16.12-S1 through 9.18.21-S1. This vulnerability arises from a poorly coordinated interaction between DNS64 and serve-stale features. By exploiting this issue, an attacker may potentially cause instability in DNS servers, leading to service disruption. It is crucial for affected organizations to upgrade their BIND 9 versions to the latest patches as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.