Red Hat Security Advisory

RHSA-2022:7643

bind9.16 security update

Released 2022-11-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 8) bind9.16-devel-32:9.16.23-0.9.el8.1, bind9.16-dnssec-utils-32:9.16.23-0.9.el8.1, bind9.16-doc-32:9.16.23-0.9.el8.1 +2
Red Hat Enterprise Linux AppStream (v. 8) bind9.16-32:9.16.23-0.9.el8.1, bind9.16-chroot-32:9.16.23-0.9.el8.1, bind9.16-libs-32:9.16.23-0.9.el8.1 +2

Fixes 2 records

TI-2021-07480 CVE-2021-25220 · GHSA-v8rf-mvwx-cx29

DNS forwarders - cache poisoning vulnerability

LOW 36

BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.0345 Published 2022-03-23 Fixed CWE-444

TI-2022-00321 CVE-2022-0396 · GHSA-wqqg-j8m9-9rcc

DoS from specifically crafted TCP packets

LOW 29

BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02681 Published 2022-03-23 Fixed CWE-404