Important: bind9.16 security update
Summary
ALSA-2023:4100: Important: bind9.16 security update. Affects bind9.16 versions < 32:9.16.23-0.14.el8_8.1.alma. Fixed in 32:9.16.23-0.14.el8_8.1.alma. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.
Vulnerability Detail
The named's configured cache size limit in bind9.16 can be significantly exceeded, leading to a security vulnerability (CVE-2023-2828). This vulnerability can have severe consequences and may allow attackers to exploit the DNS server.
How To Fix
Minimum fixed version
32:9.16.23-0.14.el8_8.1.alma
This is the first release that contains the fix.
sudo dnf update bind9.16Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. It is advised to update the package to the fixed version as soon as possible.
Conclusion
It is crucial to update the bind9.16 package to the fixed version to mitigate the security vulnerability. Failure to do so may expose your DNS server to potential attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for bind9.16 →
FAQ
BIND is an implementation of the Domain Name System (DNS) protocols and includes a DNS server, resolver library, and tools for DNS server verification.
This vulnerability can allow attackers to exceed the configured cache size limit in BIND, potentially leading to unauthorized access or denial of service.
You can use the Vulert playground at Vulert Scanner to check if your system is affected by this vulnerability. Simply upload your package-lock.json file to the playground and it will alert you in real-time.
Yes, a fix is available in bind9.16 version 9.16.23-0.14.el8_8.1.alma or later. It is recommended to update to the latest version to address the vulnerability.
You can find more information about this vulnerability, including the CVE page, in the References section of the advisory: https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2023:4100.json
Related vulnerabilities
Recent vulnerabilities recorded for bind9.16.
