Skip to content
OpenAdvisories
Medium RHSA-2023:0402 2 CVEs

Red Hat Security Advisory: bind security update

Published Sep 16, 2024 · Updated Sep 2, 2026

Ecosystem: Red Hat

Fixed packages 63

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::client bind 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-chroot 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-debuginfo 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-export-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-export-libs 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-libs 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-libs-lite 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-license 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-lite-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11-libs 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-pkcs11-utils 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-sdb 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-sdb-chroot 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::client bind-utils 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::computenode bind 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-chroot 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-debuginfo 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-export-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-lite-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11-libs 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-pkcs11-utils 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-sdb 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::computenode bind-sdb-chroot 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-chroot 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-debuginfo 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-export-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-export-libs 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-libs 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-libs-lite 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-license 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-lite-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11-libs 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-pkcs11-utils 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-sdb 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-sdb-chroot 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::server bind-utils 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-chroot 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-debuginfo 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-export-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-export-libs 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-libs 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-libs-lite 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-license 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-lite-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11-devel 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11-libs 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-pkcs11-utils 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-sdb 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-sdb-chroot 32:9.11.4-26.P2.el7_9.13
Red Hat · RHEL 7 enterprise_linux:7::workstation bind-utils 32:9.11.4-26.P2.el7_9.13

Vulnerabilities 2

  • Medium 6.8
    CVE-2021-25220

    DNS forwarders - cache poisoning vulnerability

    BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to…

    ISC BIND bind9 bind9 Debian Ubuntu Azure Linux Alpine
  • Medium 5.3
    CVE-2022-2795

    Processing large delegations may severely degrade resolver performance

    By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.

    ISC BIND9 bind9 bind9 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2064512
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2128584
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0402.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-25220
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-25220
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-25220
  • article
    https://kb.isc.org/docs/CVE-2021-25220
  • report
    https://access.redhat.com/security/cve/CVE-2022-2795
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-2795
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-2795
  • article
    https://kb.isc.org/docs/cve-2022-2795