Moderate: bind security update
Summary
ALSA-2022:7790: Moderate: bind security update. Affects bind versions < 32:9.11.36-5.el8. Fixed in 32:9.11.36-5.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.
Vulnerability Detail
The BIND package is vulnerable to a cache poisoning vulnerability (CVE-2021-25220) in the DNS forwarders. This vulnerability could allow an attacker to manipulate the DNS cache and redirect DNS queries to malicious servers, leading to potential data exfiltration or unauthorized access.
How To Fix
Minimum fixed version
32:9.11.36-5.el8
This is the first release that contains the fix.
sudo dnf update bindTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the security update as soon as possible to protect your system from potential attacks.
Conclusion
The BIND package is vulnerable to a cache poisoning vulnerability that could allow attackers to manipulate DNS queries and potentially compromise the integrity and confidentiality of DNS communications. It is crucial to update the BIND package to the latest version to mitigate this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for bind →
FAQ
BIND is an implementation of the Domain Name System (DNS) protocols, providing DNS server functionality, resolver library, and tools for DNS server verification.
The vulnerability allows an attacker to manipulate the DNS cache, potentially redirecting DNS queries to malicious servers and compromising the integrity and confidentiality of DNS communications.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground, and it will analyze and alert you if any vulnerabilities are found.
There are no known public exploits for this vulnerability at the time of this advisory. However, it is crucial to apply the security update to mitigate the risk of potential attacks.
You can refer to the CVE page for CVE-2021-25220 for more detailed information about this vulnerability, including its impact, CVSS score, acknowledgments, and related information.
Related vulnerabilities
Recent vulnerabilities recorded for bind.
