CVE-2023-50868: bind9 (exact versions not specified); +6 more affected products

CVE-2023-50868 affects bind9. EPSS 0.73725 (percentile 0.99475), scored 20-Oct-2026. Fixed version: 1:9.18.24-1. Fixed version: 1:9.19.21-1. Fixed version: 1:9.19.21-1. Fixed version: 3.6.2-1. Fixed version: 3.6.2-1. Fixed version: 2.90-4~deb12u1. Fixed version: 2.90-1. Fixed version: 2.90-1. Fixed version: 5.6.0-1+deb12u1. Fixed version: 5.7.1-1. Fixed version: 5.7.1-1. Fixed version: 4.8.6-1. Fixed version: 4.9.3-1. Fixed version: 4.9.3-1. Fixed version: 252.23-1~deb12u1. Fixed version: 255.4-1. Fixed version: 255.4-1. Fixed version: 1.17.1-2+deb12u2. Fixed version: 1.19.1-1.

Affected technology

bind9 · Exact affected versions not specified by the source
Vendor not specified by the source

dnsjava · Exact affected versions not specified by the source
Vendor not specified by the source

dnsmasq · Exact affected versions not specified by the source
Vendor not specified by the source

knot-resolver · Exact affected versions not specified by the source
Vendor not specified by the source

pdns-recursor · Exact affected versions not specified by the source
Vendor not specified by the source

systemd · Exact affected versions not specified by the source
Vendor not specified by the source

unbound · Exact affected versions not specified by the source
Vendor not specified by the source

Component: Not specified by the source

What an attacker can do

A remote attacker could possibly use this issue to cause Unbound to consume resources, leading to a denial of service.

Published 21-Oct-2026 15:29 UTC

Product: bind9
CCR priority: 18.4 /100 (P5)
EPSS: 0.73725 · percentile 0.99475 · 2026-10-20
KEV: no

Provenance

OSV.dev · Source record · observed 2026-10-21 07:07:21.683489+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2023-50868.html