What is CVE-2023-3341?

CVE-2023-3341 is a high-severity vulnerability affecting BIND 9, a widely used Domain Name System (DNS) software. This stack exhaustion flaw in the control channel code may cause the named process to terminate unexpectedly, leading to potential denial of service attacks.

Who is impacted by this?

The issue impacts various versions of BIND 9, including 9.2.0 to 9.16.43, 9.18.0 to 9.18.18, and 9.19.0 to 9.19.16. Additionally, BIND Supported Preview Edition versions 9.9.3-S1 to 9.16.43-S1 and 9.18.0-S1 to 9.18.18-S1 are also affected. This vulnerability may cause the named process to terminate unexpectedly, potentially leading to denial of service attacks on affected systems.

What should I do if I’m affected

If you're affected by the CVE-2023-3341 vulnerability, it's important to take action to secure your system. Follow these steps to mitigate the risk:

1. Update BIND 9 to the latest version or apply the relevant patches. See the ISC Downloads page for updates.

2. Monitor for any unexpected termination of the named process and investigate the cause.

3. Stay informed about new vulnerabilities or updates related to BIND 9.

4. Consider limiting remote access to the control channel's configured TCP port to trusted IP ranges on the network level.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

As of now, CVE-2023-3341 is not listed in CISA's Known Exploited Vulnerabilities Catalog.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-787, a stack exhaustion flaw in control channel code causing unexpected termination of the named process.

Learn More

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or refer to the sources below:

• OSS-Security - ISC Disclosed Vulnerabilities in BIND 9

• ISC Security Advisory - CVE-2023-3341

• Debian LTS Security Update - BIND9

• Fedora 38 Update - bind-dyndb-ldap