Red Hat Security Advisory

RHSA-2022:8068

bind security update

Released 2022-11-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat CodeReady Linux Builder (v. 9) bind-devel-32:9.16.23-5.el9_1, bind-doc-32:9.16.23-5.el9_1, bind-libs-32:9.16.23-5.el9_1
Red Hat Enterprise Linux AppStream (v. 9) bind-32:9.16.23-5.el9_1, bind-chroot-32:9.16.23-5.el9_1, bind-dnssec-doc-32:9.16.23-5.el9_1 +5

Fixes 2 records

TI-2021-07480 CVE-2021-25220 · GHSA-v8rf-mvwx-cx29

DNS forwarders - cache poisoning vulnerability

LOW 36

BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.0345 Published 2022-03-23 Fixed CWE-444

TI-2022-00321 CVE-2022-0396 · GHSA-wqqg-j8m9-9rcc

DoS from specifically crafted TCP packets

LOW 29

BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02681 Published 2022-03-23 Fixed CWE-404