Lucene search

K
oraclelinuxOracleLinuxELSA-2024-2551
HistoryMay 07, 2024 - 12:00 a.m.

bind security update

2024-05-0700:00:00
linux.oracle.com
8
bind
security update
device file permissions
z-stream tag
dns vulnerabilities
cpu load.

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

Low

0.037 Low

EPSS

Percentile

91.7%

bind
[9.16.23-18.0.1]

  • Fix warning when changing device file permissions [Orabug: 36518580]
    [32:9.16.23-18.1]
  • Rebuild with correct z-stream tag again
    [32:9.16.23-18]
  • Prevent crashing at masterformat system test (CVE-2023-6516)
    [32:9.16.23-17]
  • Import tests for large DNS messages fix
  • Add downstream change complementing CVE-2023-50387
    [32:9.16.23-16]
  • Prevent increased CPU load on large DNS messages (CVE-2023-4408)
  • Prevent assertion failure when nxdomain-redirect is used with
    RFC 1918 reverse zones (CVE-2023-5517)
  • Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
  • Specific recursive query patterns may lead to an out-of-memory
    condition (CVE-2023-6516)
  • Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)
    bind-dyndb-ldap
    [11.9-9]
  • Rebuild required for BIND changes for KeyTrap change (CVE-2023-50387)

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

Low

0.037 Low

EPSS

Percentile

91.7%