ALSA-2024:1781

Source

https://errata.almalinux.org/8/ALSA-2024-1781.html

Import Source

https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux8/ALSA-2024:1781.json

Related

• CVE-2023-4408
• CVE-2023-50387
• CVE-2023-50868
• CVE-2023-5517
• CVE-2023-5679
• CVE-2023-6516

Published

2024-04-11T00:00:00Z

Modified

2024-04-12T18:44:24Z

Details

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

• bind9: Parsing large DNS messages may cause excessive CPU load (CVE-2023-4408)
• bind9: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled (CVE-2023-5517)
• bind9: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution (CVE-2023-5679)
• bind9: Specific recursive query patterns may lead to an out-of-memory condition (CVE-2023-6516)
• bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
• bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

• https://access.redhat.com/errata/RHSA-2024:1781
• https://access.redhat.com/security/cve/CVE-2023-4408
• https://access.redhat.com/security/cve/CVE-2023-50387
• https://access.redhat.com/security/cve/CVE-2023-50868
• https://access.redhat.com/security/cve/CVE-2023-5517
• https://access.redhat.com/security/cve/CVE-2023-5679
• https://access.redhat.com/security/cve/CVE-2023-6516
• https://bugzilla.redhat.com/2263896
• https://bugzilla.redhat.com/2263897
• https://bugzilla.redhat.com/2263909
• https://bugzilla.redhat.com/2263911
• https://bugzilla.redhat.com/2263914
• https://bugzilla.redhat.com/2263917
• https://errata.almalinux.org/8/ALSA-2024-1781.html