Red Hat Security Advisory

RHSA-2024:5871

bind security update

Released 2024-08-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) bind-32:9.11.26-4.el8_4.6, bind-chroot-32:9.11.26-4.el8_4.6, bind-devel-32:9.11.26-4.el8_4.6 +12
Red Hat Enterprise Linux AppStream E4S (v.8.4) bind-32:9.11.26-4.el8_4.6, bind-chroot-32:9.11.26-4.el8_4.6, bind-devel-32:9.11.26-4.el8_4.6 +12
Red Hat Enterprise Linux AppStream TUS (v.8.4) bind-32:9.11.26-4.el8_4.6, bind-chroot-32:9.11.26-4.el8_4.6, bind-devel-32:9.11.26-4.el8_4.6 +12
Red Hat Enterprise Linux BaseOS AUS (v.8.4) bind-32:9.11.26-4.el8_4.6, bind-export-devel-32:9.11.26-4.el8_4.6, bind-export-libs-32:9.11.26-4.el8_4.6
Red Hat Enterprise Linux BaseOS E4S (v.8.4) bind-32:9.11.26-4.el8_4.6, bind-export-devel-32:9.11.26-4.el8_4.6, bind-export-libs-32:9.11.26-4.el8_4.6
Red Hat Enterprise Linux BaseOS TUS (v.8.4) bind-32:9.11.26-4.el8_4.6, bind-export-devel-32:9.11.26-4.el8_4.6, bind-export-libs-32:9.11.26-4.el8_4.6

Fixes 2 records

TI-2024-01838 CVE-2024-1975 · GHSA-xv2w-3fww-7hvf

SIG(0) can be used to exhaust CPU resources

MEDIUM 43

If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02114 Published 2024-07-23 Partial fix CWE-770

TI-2024-01615 CVE-2024-1737 · GHSA-9xxq-vvgh-v3r9

BIND's database will be slow if a very large number of RRs exist at the same name

MEDIUM 43

Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02114 Published 2024-07-23 Partial fix CWE-770