Skip to content
OpenAdvisories
High RHSA-2023:2792 4 CVEs

Red Hat Security Advisory: bind9.16 security and bug fix update

Published Sep 16, 2024 · Updated Sep 2, 2026

Ecosystem: Red Hat

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-chroot 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-debuginfo 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-debugsource 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-dnssec-utils 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-dnssec-utils-debuginfo 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-libs 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-libs-debuginfo 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-license 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-utils 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind9.16-utils-debuginfo 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-bind9.16 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-debuginfo 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-debugsource 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-devel 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-dnssec-utils-debuginfo 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-doc 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-libs 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-libs-debuginfo 32:9.16.23-0.14.el8
Red Hat · RHEL 8 enterprise_linux:8::crb bind9.16-utils-debuginfo 32:9.16.23-0.14.el8

Vulnerabilities 4

  • High 7.5
    CVE-2022-3094 EPSS 13%

    An UPDATE message flood may cause named to exhaust all available memory

    Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `named` to exit due to a lack of free memory. We are not aware of any cases where this has been exploited. Memory is allocated prior to the …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2022-3736 EPSS 48%

    named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries

    BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2022-3924 EPSS 16%

    named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota

    This issue can affect BIND 9 resolvers with `stale-answer-enable yes;` that also make use of the option `stale-answer-client-timeout`, configured with a value greater than zero. If the resolver receives many queries that require recursion, there will be a cor…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • Medium 5.3
    CVE-2022-2795

    Processing large delegations may severely degrade resolver performance

    By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.

    ISC BIND9 bind9 bind9 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2115322
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2128584
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2164032
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2164038
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2164039
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2792.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-2795
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-2795
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-2795
  • article
    https://kb.isc.org/docs/cve-2022-2795
  • report
    https://access.redhat.com/security/cve/CVE-2022-3094
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-3094
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-3094
  • article
    https://kb.isc.org/docs/cve-2022-3094
  • report
    https://access.redhat.com/security/cve/CVE-2022-3736
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-3736
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-3736
  • article
    https://kb.isc.org/docs/cve-2022-3736
  • report
    https://access.redhat.com/security/cve/CVE-2022-3924
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-3924
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-3924
  • article
    https://kb.isc.org/docs/cve-2022-3924