Home / Security / Advisories / NTAP-20240426-0001

NTAP-20240426-0001 — CVE-2023-4408 ISC BIND Vulnerability in NetApp Products

Published 2024-04-26 · Updated 2026-03-05 · Status: Final · Exploitation: Public · Severity: HIGH 7.5 · ONTAP affected: Yes

Official advisory: NTAP-20240426-0001 on security.netapp.com ↗. Affected versions, fixed releases, and workarounds live there — this page is a summary.

Product family: Active IQ Unified Manager · SolidFire / NetApp HCI · ONTAP | ONTAP-relevant | highest CVSS: 7.5

CVEs in this advisory

CVE-2023-4408 — HIGH · CVSS 7.5 · site index

What the CVE records say

CVE-2023-4408 — The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` instance by exploiting this flaw. This issue affects both authoritative servers and recursive resolvers. This issue affects BIND 9 versions 9.0.0 through 9.16.45, 9.18.0 through 9.18.21, 9.19.0 through 9.19.19, 9.9.3-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.45-S1, and 9.18.11-S1 through 9.18.21-S1.

Impact

Successful exploitation of this vulnerability could lead to Denial of Service (DoS). <br><br> ONTAP 9 (formerly Clustered Data ONTAP):<br> Affected only in versions 9.14.1 and 9.15.1.

Affected products

Active IQ Unified Manager for VMware vSphere
NetApp HCI Baseboard Management Controller (BMC) - H300S/H500S/H700S/H410S
NetApp HCI Baseboard Management Controller (BMC) - H410C
NetApp HCI Compute Node (Bootstrap OS)
ONTAP 9

Official fixes

Active IQ Unified Manager for VMware vSphere — vendor fix ↗
ONTAP 9 — vendor fix ↗

References

https://kb.isc.org/docs/cve-2023-4408 ↗

What to do

Check the affected products listed above against the official advisory's affected-versions table — that is where the exact ONTAP 9 release, ONTAP tool, or management product versions are named.
If affected and a fixed release exists, plan the upgrade — see the ONTAP upgrade runbook.
If exploitation is listed as "active", treat remediation as urgent and review exposure (management LIFs, ONTAP S3, SnapMirror endpoints).
Harden in parallel: security hardening baseline and ransomware protection on ONTAP.