Important: bind and bind-dyndb-ldap security update
Summary
ALSA-2024:5231: Important: bind and bind-dyndb-ldap security update. Affects bind versions < 32:9.16.23-18.el9_4.6. Fixed in 32:9.16.23-18.el9_4.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.
Vulnerability Detail
This security update addresses multiple vulnerabilities in BIND and bind-dyndb-ldap:
- CVE-2024-1737: BIND's database will be slow if a very large number of RRs exist at the same name.
- CVE-2024-1975: SIG(0) can be used to exhaust CPU resources.
- CVE-2024-4076: Assertion failure when serving both stale cache data and authoritative zone content.
These vulnerabilities could lead to performance degradation, resource exhaustion, and potential denial-of-service attacks.
How To Fix
Minimum fixed version
32:9.16.23-18.el9_4.6
This is the first release that contains the fix.
sudo dnf update bindTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no known workarounds for these vulnerabilities.
Conclusion
It is crucial to update the affected BIND and bind-dyndb-ldap packages to address these vulnerabilities. Failure to do so may result in performance issues and potential denial-of-service attacks. Stay vigilant and ensure that your systems are up to date with the latest security patches.
See every vulnerability recorded for bind →
FAQ
BIND is an implementation of the Domain Name System (DNS) protocols, providing DNS server functionality, resolver library, and tools for DNS management.
bind-dyndb-ldap is a BIND plug-in that provides LDAP back-end functionality for storing DNS data in LDAP directories.
These vulnerabilities can result in performance degradation, resource exhaustion, and potential denial-of-service attacks.
To fix these vulnerabilities, update the affected packages to the recommended versions provided by AlmaLinux.
No, there are no known workarounds for these vulnerabilities.
Related vulnerabilities
Recent vulnerabilities recorded for bind.
