Moderate: bind security and bug fix update
Summary
ALSA-2023:3002: Moderate: bind security and bug fix update. Affects bind versions < 32:9.11.36-8.el8. Fixed in 32:9.11.36-8.el8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.
Vulnerability Detail
Processing large delegations in BIND may severely degrade resolver performance. This vulnerability is identified as CVE-2022-2795. It can have a moderate impact on the system's performance and may lead to service degradation or denial of service.
How To Fix
Minimum fixed version
32:9.11.36-8.el8
This is the first release that contains the fix.
sudo dnf update bindTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
In conclusion, the bind package is vulnerable to a security issue that can severely degrade resolver performance. It is recommended to update the package to the latest version to address this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for bind →
FAQ
BIND is an implementation of the Domain Name System (DNS) protocols.
The vulnerability can severely degrade resolver performance and may lead to service degradation or denial of service.
The CVE identifier for this vulnerability is CVE-2022-2795.
To fix this vulnerability, update the bind package to version 9.11.36-8.el8 or later.
You can find more information about this vulnerability on the CVE page listed in the References section.
Related vulnerabilities
Recent vulnerabilities recorded for bind.
