Red Hat Security Advisory

RHSA-2022:2092

bind security, bug fix, and enhancement update

Released 2022-05-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) bind-32:9.11.36-3.el8, bind-chroot-32:9.11.36-3.el8, bind-devel-32:9.11.36-3.el8 +12
Red Hat Enterprise Linux BaseOS (v. 8) bind-32:9.11.36-3.el8, bind-export-devel-32:9.11.36-3.el8, bind-export-libs-32:9.11.36-3.el8

Fixes 1 record

TI-2021-07479 CVE-2021-25219 · GHSA-x6vq-rxvf-3ggc

Lame cache can be abused to severely degrade resolver performance

LOW 37

In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.18 of the BIND 9.17 development b…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.11158 Published 2021-10-27 Partial fix