Important: bind security update
Summary
ALSA-2023:5689: Important: bind security update. Affects bind versions < 32:9.16.23-11.el9_2.2. Fixed in 32:9.16.23-11.el9_2.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.
Vulnerability Detail
A stack exhaustion vulnerability has been discovered in the control channel code of BIND. This vulnerability, identified as CVE-2023-3341, could be exploited to cause a denial-of-service (DoS) attack. An attacker could exhaust the stack, leading to the unavailability of the BIND service.
How To Fix
Minimum fixed version
32:9.16.23-11.el9_2.2
This is the first release that contains the fix.
sudo dnf update bindTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
It is crucial to update the BIND package to the recommended version or later to mitigate the stack exhaustion vulnerability. Failure to do so may expose the BIND service to potential denial-of-service attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for bind →
FAQ
BIND is an implementation of the Domain Name System (DNS) protocols, providing a DNS server, resolver library, and tools for DNS server verification.
The vulnerability could be exploited by an attacker to cause a denial-of-service (DoS) attack, leading to the unavailability of the BIND service.
The CVE identifier for this vulnerability is CVE-2023-3341.
To fix this vulnerability, update the BIND package to version 9.16.23-11.el9_2.2 or later.
No workaround has been provided for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for bind.
