CVE-2023-5680: Cleaning an ECS-enabled cache may cause excessive CPU load

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-02-13 · updated 2026-06-17

Description

If a resolver cache has a very large number of ECS records stored for the same name, the process of cleaning the cache database node for this name can significantly impair query performance. This issue affects BIND 9 versions 9.11.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

Affected products

ISC BIND: 9.11.3-s1, 9.11.3-s4, 9.11.4-s1, 9.11.5-s3, 9.11.5-s5, 9.11.5-s6 (+21)
Active IQ Unified Manager for VMware vSphere, Linux, and Microsoft Windows: all versions

References

https://kb.isc.org/docs/cve-2023-5680
https://security.netapp.com/advisory/ntap-20240503-0005/
https://kb.isc.org/docs/cve-2023-5680
https://security.netapp.com/advisory/ntap-20240503-0005/

Get alerted when CVE-2023-5680 or the next vulnerability affects your stack