Skip to content
OpenAdvisories
High RHSA-2024:5655 2 CVEs

Red Hat Security Advisory: bind security update

Published Sep 27, 2024 · Updated Oct 13, 2026

Ecosystem: Red Hat

Fixed packages 38

ReleasePackageFixed in
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-chroot 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-debugsource 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-devel 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-export-libs-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-libs 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-libs-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-libs-lite 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-libs-lite-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-license 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-lite-devel 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-pkcs11 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-pkcs11-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-pkcs11-devel 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-pkcs11-libs 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-pkcs11-libs-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-pkcs11-utils 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-pkcs11-utils-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-sdb 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-sdb-chroot 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-sdb-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-utils 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream bind-utils-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::appstream python3-bind 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos bind 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos bind-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos bind-debugsource 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos bind-export-devel 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos bind-export-libs 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos bind-export-libs-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos bind-libs-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos bind-libs-lite-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos bind-pkcs11-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos bind-pkcs11-libs-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos bind-pkcs11-utils-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos bind-sdb-debuginfo 32:9.11.13-6.el8_2.9
Red Hat · RHEL 8.2 AUS rhel_aus:8.2::baseos bind-utils-debuginfo 32:9.11.13-6.el8_2.9

Vulnerabilities 2

  • High 7.5
    CVE-2024-1737

    BIND's database will be slow if a very large number of RRs exist at the same name

    Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any RTYPE) can suffer from degraded performance as content is being added or updated, and also when handling client queries for this name. This iss…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2024-1975

    SIG(0) can be used to exhaust CPU resources

    If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from a DNSSEC-signed domain in cache, a client can exhaust resolver CPU resources by sending a stream of SIG(0) signed requests. This issue aff…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2298893
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2298901
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5655.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-1737
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-1737
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-1737
  • report
    https://access.redhat.com/security/cve/CVE-2024-1975
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-1975
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-1975