CVE-2023-5680

A flaw was found in the bind9 package. This issue may allow an attacker to substantially decrease named performance by sending a specific set of queries, forcing the same name to have a large number of ECS records stored. In the worst case scenario, named can become unresponsive, leading to a Denial of Service.

The versions of bind9 shipped with Red Hat Enterprise Linux 6, 7, 8 and 9 are not affected by this vulnerability as it doesn't contain the vulnerable code. This CVE only impacts the "-S" versions of bind9 package, which are different in code base than the ones distributed in Red Hat products.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.