Skip to content
OpenAdvisories
High RHSA-2023:2261 4 CVEs

Red Hat Security Advisory: bind security and bug fix update

Published Sep 16, 2024 · Updated Sep 2, 2026

Ecosystem: Red Hat

Fixed packages 21

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::appstream bind 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-chroot 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-debuginfo 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-debugsource 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-dnssec-doc 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-dnssec-utils 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-dnssec-utils-debuginfo 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-libs 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-libs-debuginfo 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-license 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-utils 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream bind-utils-debuginfo 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::appstream python3-bind 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::crb bind-debuginfo 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::crb bind-debugsource 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::crb bind-devel 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::crb bind-dnssec-utils-debuginfo 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::crb bind-doc 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::crb bind-libs 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::crb bind-libs-debuginfo 32:9.16.23-11.el9
Red Hat · RHEL 9 enterprise_linux:9::crb bind-utils-debuginfo 32:9.16.23-11.el9

Vulnerabilities 4

  • High 7.5
    CVE-2022-3094 EPSS 13%

    An UPDATE message flood may cause named to exhaust all available memory

    Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `named` to exit due to a lack of free memory. We are not aware of any cases where this has been exploited. Memory is allocated prior to the …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2022-3736 EPSS 48%

    named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries

    BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2022-3924 EPSS 16%

    named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota

    This issue can affect BIND 9 resolvers with `stale-answer-enable yes;` that also make use of the option `stale-answer-client-timeout`, configured with a value greater than zero. If the resolver receives many queries that require recursion, there will be a cor…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2022-2795

    Processing large delegations may severely degrade resolver performance

    By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.

    ISC BIND9 bind9 bind9 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2126912
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2128584
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2129466
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2162795
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2164032
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2164038
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2164039
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2261.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-2795
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-2795
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-2795
  • article
    https://kb.isc.org/docs/cve-2022-2795
  • report
    https://access.redhat.com/security/cve/CVE-2022-3094
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-3094
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-3094
  • article
    https://kb.isc.org/docs/cve-2022-3094
  • report
    https://access.redhat.com/security/cve/CVE-2022-3736
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-3736
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-3736
  • article
    https://kb.isc.org/docs/cve-2022-3736
  • report
    https://access.redhat.com/security/cve/CVE-2022-3924
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-3924
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-3924
  • article
    https://kb.isc.org/docs/cve-2022-3924