Summary
[32:9.11.4-26.P2.13]
- Tighten cache protection against record from forwarders (CVE-2021-25220)
[32:9.11.4-26.P2.12]
- Include test of forwarders (CVE-2021-25220)
[32:9.11.4-26.P2.11]
- Prevent excessive resource use while processing large delegations.
(CVE-2022-2795)
Fixed packages 16
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | bind | 32:9.11.4-26.P2.el7_9.13 |
| Oracle Linux · 7 | bind-chroot | 32:9.11.4-26.P2.el7_9.13 |
| Oracle Linux · 7 | bind-devel | 32:9.11.4-26.P2.el7_9.13 |
| Oracle Linux · 7 | bind-export-devel | 32:9.11.4-26.P2.el7_9.13 |
| Oracle Linux · 7 | bind-export-libs | 32:9.11.4-26.P2.el7_9.13 |
| Oracle Linux · 7 | bind-libs | 32:9.11.4-26.P2.el7_9.13 |
| Oracle Linux · 7 | bind-libs-lite | 32:9.11.4-26.P2.el7_9.13 |
| Oracle Linux · 7 | bind-license | 32:9.11.4-26.P2.el7_9.13 |
| Oracle Linux · 7 | bind-lite-devel | 32:9.11.4-26.P2.el7_9.13 |
| Oracle Linux · 7 | bind-pkcs11 | 32:9.11.4-26.P2.el7_9.13 |
| Oracle Linux · 7 | bind-pkcs11-devel | 32:9.11.4-26.P2.el7_9.13 |
| Oracle Linux · 7 | bind-pkcs11-libs | 32:9.11.4-26.P2.el7_9.13 |
| Oracle Linux · 7 | bind-pkcs11-utils | 32:9.11.4-26.P2.el7_9.13 |
| Oracle Linux · 7 | bind-sdb | 32:9.11.4-26.P2.el7_9.13 |
| Oracle Linux · 7 | bind-sdb-chroot | 32:9.11.4-26.P2.el7_9.13 |
| Oracle Linux · 7 | bind-utils | 32:9.11.4-26.P2.el7_9.13 |
Vulnerabilities 2
-
Medium 6.8
DNS forwarders - cache poisoning vulnerability
BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to…
-
Medium 5.3
Processing large delegations may severely degrade resolver performance
By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.