Skip to content
OpenAdvisories
High ELSA-2022-7643 2 CVEs

Important: bind9.16 security update (Oracle Linux 8)

Published Nov 15, 2022 · Updated Nov 15, 2022

Ecosystem: Oracle Linux

Summary

[32:9.16.23-0.9.1]
- Fix possible serve-stale related crash (CVE-2022-3080)
- Fix memory leak in ECDSA verify processing (CVE-2022-38177)
- Fix memory leak in EdDSA verify processing (CVE-2022-38178)

[32:9.16.23-0.9]
- Tighten cache protection against record from forwarders (CVE-2021-25220)
- Include test of forwarders

[32:9.16.23-0.8]
- TCP connections with keep-response-order are properly close in all cases
(CVE-2022-0396)

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 8 bind9.16 32:9.16.23-0.9.el8.1
Oracle Linux · 8 bind9.16-chroot 32:9.16.23-0.9.el8.1
Oracle Linux · 8 bind9.16-devel 32:9.16.23-0.9.el8.1
Oracle Linux · 8 bind9.16-dnssec-utils 32:9.16.23-0.9.el8.1
Oracle Linux · 8 bind9.16-doc 32:9.16.23-0.9.el8.1
Oracle Linux · 8 bind9.16-libs 32:9.16.23-0.9.el8.1
Oracle Linux · 8 bind9.16-license 32:9.16.23-0.9.el8.1
Oracle Linux · 8 bind9.16-utils 32:9.16.23-0.9.el8.1
Oracle Linux · 8 python3-bind9.16 32:9.16.23-0.9.el8.1

Vulnerabilities 2

  • Medium 6.8
    CVE-2021-25220

    DNS forwarders - cache poisoning vulnerability

    BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to…

    ISC BIND bind9 bind9 Debian Ubuntu Azure Linux Alpine
  • Medium 5.3
    CVE-2022-0396

    DoS from specifically crafted TCP packets

    BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after t…

    ISC BIND bind9 bind9 Debian Ubuntu Azure Linux Alpine