AlmaLinuxALSA-2023:7177Moderate: bind security update
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.1%
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.
Security Fix(es):
- bind: flooding with UPDATE requests may lead to DoS (CVE-2022-3094)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 8 | i686 | bind-export-devel | < 9.11.36-11.el8_9 | bind-export-devel-9.11.36-11.el8_9.i686.rpm |
| almalinux | 8 | i686 | bind-export-libs | < 9.11.36-11.el8_9 | bind-export-libs-9.11.36-11.el8_9.i686.rpm |
| almalinux | 8 | noarch | bind-license | < 9.11.36-11.el8_9 | bind-license-9.11.36-11.el8_9.noarch.rpm |
| almalinux | 8 | i686 | bind-pkcs11-libs | < 9.11.36-11.el8_9 | bind-pkcs11-libs-9.11.36-11.el8_9.i686.rpm |
| almalinux | 8 | noarch | python3-bind | < 9.11.36-11.el8_9 | python3-bind-9.11.36-11.el8_9.noarch.rpm |
| almalinux | 8 | i686 | bind-lite-devel | < 9.11.36-11.el8_9 | bind-lite-devel-9.11.36-11.el8_9.i686.rpm |
| almalinux | 8 | i686 | bind-devel | < 9.11.36-11.el8_9 | bind-devel-9.11.36-11.el8_9.i686.rpm |
| almalinux | 8 | i686 | bind-pkcs11-devel | < 9.11.36-11.el8_9 | bind-pkcs11-devel-9.11.36-11.el8_9.i686.rpm |
| almalinux | 8 | i686 | bind-libs-lite | < 9.11.36-11.el8_9 | bind-libs-lite-9.11.36-11.el8_9.i686.rpm |
| almalinux | 8 | i686 | bind-libs | < 9.11.36-11.el8_9 | bind-libs-9.11.36-11.el8_9.i686.rpm |
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.1%