ALSA-2023:2792

Dashboard / Vulnerabilities / ALSA-2023:2792

ALSA-2023:2792

Summary: Moderate: bind9.16 security and bug fix update

Details: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: processing large delegations may severely degrade resolver performance (CVE-2022-2795) * bind: flooding with UPDATE requests may lead to DoS (CVE-2022-3094) * bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3736) * bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3924) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

References: https://access.redhat.com/errata/RHSA-2023:2792, https://access.redhat.com/security/cve/CVE-2022-2795, https://access.redhat.com/security/cve/CVE-2022-3094, https://access.redhat.com/security/cve/CVE-2022-3736, https://access.redhat.com/security/cve/CVE-2022-3924, https://bugzilla.redhat.com/2128584, https://bugzilla.redhat.com/2164032, https://bugzilla.redhat.com/2164038, https://bugzilla.redhat.com/2164039, https://errata.almalinux.org/8/ALSA-2023-2792.html