Skip to content
OpenAdvisories
Medium RHSA-2022:7643 2 CVEs

Red Hat Security Advisory: bind9.16 security update

Published Sep 16, 2024 · Updated Aug 7, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-chroot 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-debuginfo 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-debugsource 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-dnssec-utils-debuginfo 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-libs 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-libs-debuginfo 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-license 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-utils 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-utils-debuginfo 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-debuginfo 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-debugsource 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-devel 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-dnssec-utils 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-dnssec-utils-debuginfo 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-doc 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-libs 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-libs-debuginfo 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-utils-debuginfo 32:9.16.23-0.9.el8.1
Red Hat · RHEL 8 enterprise_linux:8::crb python3-bind9.16 32:9.16.23-0.9.el8.1

Vulnerabilities 2

  • Medium 6.8
    CVE-2021-25220

    DNS forwarders - cache poisoning vulnerability

    BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to…

    ISC BIND bind9 bind9 Debian Ubuntu Azure Linux Alpine
  • Medium 5.3
    CVE-2022-0396

    DoS from specifically crafted TCP packets

    BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after t…

    ISC BIND bind9 bind9 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064512
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064513
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2128601
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7643.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-25220
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-25220
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-25220
  • article
    https://kb.isc.org/docs/CVE-2021-25220
  • report
    https://access.redhat.com/security/cve/CVE-2022-0396
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-0396
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-0396
  • article
    https://kb.isc.org/docs/cve-2022-0396