Wind River Support Network

HomeDefectsLIN1024-276
Acknowledged

LIN1024-276 : Security Advisory - bind - CVE-2023-4236

Created: Apr 29, 2024    Updated: Jan 7, 2026
Resolved Date: May 12, 2024
Found In Version: 10.24.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 24
Component/s: Userspace

Description

A flaw in the networking code handling DNS-over-TLS queries may cause `named` to terminate unexpectedly due to an assertion failure. This happens when internal data structures are incorrectly reused under significant DNS-over-TLS query load.
This issue affects BIND 9 versions 9.18.0 through 9.18.18 and 9.18.11-S1 through 9.18.18-S1.
  • Linkedin
  • Facebook
  • Twitter
  • Youtube