Red Hat Security Advisory

RHSA-2023:4152

bind security update

Released 2023-07-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) bind-32:9.11.4-26.P2.el7_9.14, bind-export-libs-32:9.11.4-26.P2.el7_9.14, bind-libs-32:9.11.4-26.P2.el7_9.14 +3
Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.11.4-26.P2.el7_9.14, bind-chroot-32:9.11.4-26.P2.el7_9.14, bind-devel-32:9.11.4-26.P2.el7_9.14 +8
Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.11.4-26.P2.el7_9.14, bind-chroot-32:9.11.4-26.P2.el7_9.14, bind-devel-32:9.11.4-26.P2.el7_9.14 +8
Red Hat Enterprise Linux Server (v. 7) bind-32:9.11.4-26.P2.el7_9.14, bind-chroot-32:9.11.4-26.P2.el7_9.14, bind-export-libs-32:9.11.4-26.P2.el7_9.14 +11
Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.11.4-26.P2.el7_9.14, bind-devel-32:9.11.4-26.P2.el7_9.14.ppc, bind-export-devel-32:9.11.4-26.P2.el7_9.14 +7
Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.11.4-26.P2.el7_9.14, bind-chroot-32:9.11.4-26.P2.el7_9.14, bind-export-libs-32:9.11.4-26.P2.el7_9.14 +7
Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.11.4-26.P2.el7_9.14, bind-export-devel-32:9.11.4-26.P2.el7_9.14, bind-lite-devel-32:9.11.4-26.P2.el7_9.14 +3

Fixes 1 record

TI-2023-02649 CVE-2023-2828 · GHSA-v668-ccv8-m5gx

named's configured cache size limit can be significantly exceeded

MEDIUM 45

Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03696 Published 2023-06-21 Fixed CWE-770