Red Hat Security Advisory

RHSA-2023:3002

bind security and bug fix update

Released 2023-05-16 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) bind-32:9.11.36-8.el8, bind-chroot-32:9.11.36-8.el8, bind-devel-32:9.11.36-8.el8 +12
Red Hat Enterprise Linux BaseOS (v. 8) bind-32:9.11.36-8.el8, bind-export-devel-32:9.11.36-8.el8, bind-export-libs-32:9.11.36-8.el8

Fixes 1 record

TI-2022-02590 CVE-2022-2795 · GHSA-9mq2-v988-m7mr

Processing large delegations may severely degrade resolver performance

LOW 34

By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02291 Published 2022-09-21 Partial fix