Skip to content
OpenAdvisories
High ELSA-2023-4100 1 CVE

Important: bind9.16 security update (Oracle Linux 8)

Published Jul 20, 2023 · Updated Jul 20, 2023

Ecosystem: Oracle Linux

Summary

[32:9.16.23-14.1]
- Improve RBT overmem cache cleaning (CVE-2023-2828)

Fixed packages 9

ReleasePackageFixed in
Oracle Linux · 8 bind9.16 32:9.16.23-0.14.el8_8.1
Oracle Linux · 8 bind9.16-chroot 32:9.16.23-0.14.el8_8.1
Oracle Linux · 8 bind9.16-devel 32:9.16.23-0.14.el8_8.1
Oracle Linux · 8 bind9.16-dnssec-utils 32:9.16.23-0.14.el8_8.1
Oracle Linux · 8 bind9.16-doc 32:9.16.23-0.14.el8_8.1
Oracle Linux · 8 bind9.16-libs 32:9.16.23-0.14.el8_8.1
Oracle Linux · 8 bind9.16-license 32:9.16.23-0.14.el8_8.1
Oracle Linux · 8 bind9.16-utils 32:9.16.23-0.14.el8_8.1
Oracle Linux · 8 python3-bind9.16 32:9.16.23-0.14.el8_8.1

Vulnerabilities 1

  • High 7.5
    CVE-2023-2828

    named's configured cache size limit can be significantly exceeded

    Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size`…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux