CVE-2023-5517

A flaw in query-handling code can cause `named` to exit prematurely with an assertion failure when: - `nxdomain-redirect <domain>;` is configured, and - the resolver receives a PTR query for an RFC 1918 address that would normally result in an authoritative NXDOMAIN response. This issue affects BIND 9 versions 9.12.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

• CWE-617
• CWE-617

• http://www.openwall.com/lists/oss-security/2024/02/13/1Mailing List, Third Party Advisory
• https://kb.isc.org/docs/cve-2023-5517Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20240503-0006/Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/02/13/1Mailing List, Third Party Advisory
• https://kb.isc.org/docs/cve-2023-5517Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HVRDSJVZKMCXKKPP6PNR62T7RWZ3YSDZ/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PNNHZSZPG2E7NBMBNYPGHCFI4V4XRWNQ/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RGS7JN6FZXUSTC2XKQHH27574XOULYYJ/Mailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R/Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20240503-0006/Third Party Advisory

Published

Feb 13, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5511Cross-Site Request Forgery (CSRF) in GitHub repository snipe…8.8
• CVE-2023-5512An issue has been discovered in GitLab CE/EE affecting all v…5.7
• CVE-2023-5513Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-5514 The response messages received from the eSOMS report genera…5.3
• CVE-2023-5515 The responses for web queries with certain parameters discl…5.3
• CVE-2023-5516 Poorly constructed webap requests and URI components with s…5.3
• CVE-2023-5519The EventPrime WordPress plugin before 3.2.0 does not have C…4.3
• CVE-2023-5520Out-of-bounds Read in GitHub repository gpac/gpac prior to 2…7.7
• CVE-2023-5521Incorrect Authorization in GitHub repository tiann/kernelsu …9.8
• CVE-2023-5522Mattermost Mobile fails to limit the maximum number of Markd…4.3
• CVE-2023-5523Execution of downloaded content flaw in M-Files Web Companio…7.8
• CVE-2023-5524Insufficient blacklisting in M-Files Web Companion before re…7.3