Skip to content
OpenAdvisories
High ELSA-2023-4099 1 CVE

Important: bind security update (Oracle Linux 9)

Published Jul 19, 2023 · Updated Jul 19, 2023

Ecosystem: Oracle Linux

Summary

[32:9.16.23-11.1]
- Improve RBT overmem cache cleaning (CVE-2023-2828)

Fixed packages 10

ReleasePackageFixed in
Oracle Linux · 9 bind 32:9.16.23-11.el9_2.1
Oracle Linux · 9 bind-chroot 32:9.16.23-11.el9_2.1
Oracle Linux · 9 bind-devel 32:9.16.23-11.el9_2.1
Oracle Linux · 9 bind-dnssec-doc 32:9.16.23-11.el9_2.1
Oracle Linux · 9 bind-dnssec-utils 32:9.16.23-11.el9_2.1
Oracle Linux · 9 bind-doc 32:9.16.23-11.el9_2.1
Oracle Linux · 9 bind-libs 32:9.16.23-11.el9_2.1
Oracle Linux · 9 bind-license 32:9.16.23-11.el9_2.1
Oracle Linux · 9 bind-utils 32:9.16.23-11.el9_2.1
Oracle Linux · 9 python3-bind 32:9.16.23-11.el9_2.1

Vulnerabilities 1

  • High 7.5
    CVE-2023-2828

    named's configured cache size limit can be significantly exceeded

    Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size`…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux