Skip to content
OpenAdvisories
Medium RHSA-2023:3002 1 CVE

Red Hat Security Advisory: bind security and bug fix update

Published Sep 16, 2024 · Updated Sep 2, 2026

Ecosystem: Red Hat

Fixed packages 38

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::appstream bind 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-chroot 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-debugsource 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-devel 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-export-libs-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-libs 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-libs-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-libs-lite 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-libs-lite-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-license 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-lite-devel 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-devel 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-libs 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-libs-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-utils 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-pkcs11-utils-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-sdb 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-sdb-chroot 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-sdb-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-utils 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream bind-utils-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::appstream python3-bind 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-debugsource 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-export-devel 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-export-libs 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-export-libs-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-libs-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-libs-lite-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-pkcs11-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-pkcs11-libs-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-pkcs11-utils-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-sdb-debuginfo 32:9.11.36-8.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos bind-utils-debuginfo 32:9.11.36-8.el8

Vulnerabilities 1

  • Medium 5.3
    CVE-2022-2795

    Processing large delegations may severely degrade resolver performance

    By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.

    ISC BIND9 bind9 bind9 Debian Ubuntu Azure Linux Alpine

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.8_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2101712
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2128584
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2133889
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3002.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-2795
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-2795
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-2795
  • article
    https://kb.isc.org/docs/cve-2022-2795