Skip to content
OpenAdvisories
High RHSA-2022:6781 3 CVEs

Red Hat Security Advisory: bind9.16 security update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-chroot 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-debuginfo 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-debugsource 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-dnssec-utils-debuginfo 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-libs 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-libs-debuginfo 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-license 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-utils 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-utils-debuginfo 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-debuginfo 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-debugsource 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-devel 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-dnssec-utils 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-dnssec-utils-debuginfo 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-doc 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-libs 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-libs-debuginfo 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-utils-debuginfo 32:9.16.23-0.7.el8_6.1
Red Hat · RHEL 8 enterprise_linux:8::crb python3-bind9.16 32:9.16.23-0.7.el8_6.1

Vulnerabilities 3

  • High 7.5
    CVE-2022-3080

    BIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly

    By sending specific queries to the resolver, an attacker can cause named to crash.

    ISC BIND9 bind9 bind9 Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2022-38177

    Memory leak in ECDSA DNSSEC verification code

    By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.

    ISC BIND9 bind9 bind9 Debian Ubuntu Azure Linux Alpine
  • High 7.5
    CVE-2022-38178

    Memory leaks in EdDSA DNSSEC verification code

    By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.

    ISC BIND9 bind9 bind9 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2128600
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2128601
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2128602
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6781.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-3080
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-3080
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-3080
  • article
    https://kb.isc.org/docs/cve-2022-3080
  • report
    https://access.redhat.com/security/cve/CVE-2022-38177
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-38177
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-38177
  • article
    https://kb.isc.org/docs/cve-2022-38177
  • report
    https://access.redhat.com/security/cve/CVE-2022-38178
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-38178
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-38178
  • article
    https://kb.isc.org/docs/cve-2022-38178