Important: bind security update
Summary
ALSA-2023:5474: Important: bind security update. Affects bind versions < 32:9.11.36-8.el8_8.2. Fixed in 32:9.11.36-8.el8_8.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.
Vulnerability Detail
A stack exhaustion vulnerability has been discovered in the control channel code of BIND. This vulnerability, identified as CVE-2023-3341, could be exploited to cause a denial-of-service (DoS) attack.
How To Fix
Minimum fixed version
32:9.11.36-8.el8_8.2
This is the first release that contains the fix.
sudo dnf update bindTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
It is crucial to update the affected BIND package to the latest version to protect against the stack exhaustion vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for bind →
FAQ
BIND is an implementation of the DNS protocols, providing DNS server functionality, resolver library, and DNS verification tools.
The vulnerability could be exploited to cause a DoS attack, potentially disrupting DNS services.
No, there is no known workaround for this vulnerability. It is recommended to update to the latest version of the affected package.
There are no known exploits for this vulnerability at the time of this advisory.
You can find more information about this vulnerability, including the CVE page, in the References section of the advisory.
Related vulnerabilities
Recent vulnerabilities recorded for bind.
