CVE-2023-2829

A `named` instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache (RFC 8198) option (`synth-from-dnssec`) enabled can be remotely terminated using a zone with a malformed NSEC record. This issue affects BIND 9 versions 9.16.8-S1 through 9.16.41-S1 and 9.18.11-S1 through 9.18.15-S1.

CVSS 3.1

7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-25)

Published

2023-06-21

Modified

2026-10-24

Record from

the NVD, synced 2026-10-25

Affected

• isc:bind
• netapp:active_iq_unified_manager
• netapp:h300s_firmware
• netapp:h410c_firmware
• netapp:h410s_firmware
• netapp:h500s_firmware
• netapp:h700s_firmware

References

• https://kb.isc.org/docs/cve-2023-2829
• https://security.netapp.com/advisory/ntap-20230703-0010/
• https://kb.isc.org/docs/cve-2023-2829
• https://security.netapp.com/advisory/ntap-20230703-0010/

Check your stackJSON