Important: BIND Security Update
Summary
ALSA-2023:4099: Important: bind security update. Affects bind versions < 32:9.16.23-11.el9_2.1. Fixed in 32:9.16.23-11.el9_2.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.
Vulnerability Detail
The named's configured cache size limit in BIND can be significantly exceeded, leading to a security vulnerability (CVE-2023-2828). This vulnerability can have severe consequences and may allow attackers to exploit the DNS server.
How To Fix
Minimum fixed version
32:9.16.23-11.el9_2.1
This is the first release that contains the fix.
sudo dnf update bindTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update the BIND package to the fixed version.
Conclusion
It is crucial to update the BIND package to the fixed version to mitigate the security vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for bind →
FAQ
BIND is an implementation of the DNS protocols and includes a DNS server, resolver library, and tools for DNS server verification.
This vulnerability can allow attackers to exploit the DNS server and potentially cause significant harm.
You can use the Vulert Playground at Vulert Scanner to check if your system is affected by this vulnerability.
No, there are no known workarounds for this vulnerability. Updating the BIND package is the recommended solution.
You can find more information about this vulnerability in the CVE page: CVE-2023-2828.
Related vulnerabilities
Recent vulnerabilities recorded for bind.
