RHSA-2024:3741 — Red Hat Security Advisory: bind, bind-dyndb-ldap, and dhcp security update

Fixed packages 92

Release	Package	Fixed in
Red Hat · RHEL 7 enterprise_linux:7::client	bind	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-chroot	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-debuginfo	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-dyndb-ldap	0:11.1-7.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::client	bind-dyndb-ldap-debuginfo	0:11.1-7.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::client	bind-export-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-export-libs	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-libs	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-libs-lite	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-license	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-lite-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-pkcs11	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-pkcs11-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-pkcs11-libs	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-pkcs11-utils	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-sdb	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-sdb-chroot	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	bind-utils	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::client	dhclient	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client	dhcp	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client	dhcp-common	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client	dhcp-debuginfo	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client	dhcp-devel	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::client	dhcp-libs	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::computenode	bind	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::computenode	bind-chroot	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::computenode	bind-debuginfo	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::computenode	bind-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::computenode	bind-dyndb-ldap	0:11.1-7.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::computenode	bind-dyndb-ldap-debuginfo	0:11.1-7.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::computenode	bind-export-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::computenode	bind-lite-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::computenode	bind-pkcs11	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::computenode	bind-pkcs11-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::computenode	bind-pkcs11-libs	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::computenode	bind-pkcs11-utils	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::computenode	bind-sdb	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::computenode	bind-sdb-chroot	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::computenode	dhcp	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::computenode	dhcp-debuginfo	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::computenode	dhcp-devel	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server	bind	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-chroot	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-debuginfo	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-dyndb-ldap	0:11.1-7.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::server	bind-dyndb-ldap-debuginfo	0:11.1-7.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::server	bind-export-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-export-libs	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-libs	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-libs-lite	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-license	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-lite-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-pkcs11	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-pkcs11-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-pkcs11-libs	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-pkcs11-utils	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-sdb	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-sdb-chroot	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	bind-utils	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::server	dhclient	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server	dhcp	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server	dhcp-common	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server	dhcp-debuginfo	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server	dhcp-devel	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::server	dhcp-libs	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-chroot	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-debuginfo	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-dyndb-ldap	0:11.1-7.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-dyndb-ldap-debuginfo	0:11.1-7.el7_9.1
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-export-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-export-libs	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-libs	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-libs-lite	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-license	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-lite-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-pkcs11	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-pkcs11-devel	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-pkcs11-libs	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-pkcs11-utils	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-sdb	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-sdb-chroot	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	bind-utils	32:9.11.4-26.P2.el7_9.16
Red Hat · RHEL 7 enterprise_linux:7::workstation	dhclient	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation	dhcp	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation	dhcp-common	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation	dhcp-debuginfo	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation	dhcp-devel	12:4.2.5-83.el7_9.2
Red Hat · RHEL 7 enterprise_linux:7::workstation	dhcp-libs	12:4.2.5-83.el7_9.2

Vulnerabilities 3

High 7.5

CVE-2023-4408

Parsing large DNS messages may cause excessive CPU load

The DNS message parsing code in `named` includes a section whose computational complexity is overly high. It does not cause problems for typical DNS traffic, but crafted queries and responses may cause excessive CPU load on the affected `named` instance by ex…

ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi

Feb 13, 2024
High 7.5

CVE-2023-50387 Public exploit EPSS 100%

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to …

bind9 bind9 bind unbound Debian Ubuntu Azure Linux Alpine Wolfi

Feb 14, 2024
High 7.5

CVE-2023-50868 Public exploit EPSS 74%

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote att…

bind9 bind9 bind unbound Debian Ubuntu Azure Linux Alpine Wolfi

Feb 14, 2024

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2263896
report
https://bugzilla.redhat.com/show_bug.cgi?id=2263914
report
https://bugzilla.redhat.com/show_bug.cgi?id=2263917
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3741.json
report
https://access.redhat.com/security/cve/CVE-2023-4408
advisory
https://www.cve.org/CVERecord?id=CVE-2023-4408
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-4408
article
https://kb.isc.org/docs/cve-2023-4408
report
https://access.redhat.com/security/cve/CVE-2023-50387
advisory
https://www.cve.org/CVERecord?id=CVE-2023-50387
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-50387
article
https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-released
article
https://kb.isc.org/docs/cve-2023-50387
article
https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html
report
https://access.redhat.com/security/cve/CVE-2023-50868
advisory
https://www.cve.org/CVERecord?id=CVE-2023-50868
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-50868
article
https://kb.isc.org/docs/cve-2023-50868

Red Hat Security Advisory: bind, bind-dyndb-ldap, and dhcp security update

Fixed packages 92

Vulnerabilities 3

Parsing large DNS messages may cause excessive CPU load

Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to …

The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote att…

References