Security Vulnerabilities fixed in bind RHSA-2023:0402

description-logoDescription

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220) bind: processing large delegations may severely degrade resolver performance (CVE-2022-2795) bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220) bind: processing large delegations may severely degrade resolver performance (CVE-2022-2795) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. SolutionFor details on how to apply this update, which includes the changes described in this advisory, refer to:https://access.redhat.com/articles/11258 After installing the update, the BIND daemon (named) will be restarted automatically.

affected-products-logoAffected Applications

bind

CVE References

CVE-2021-25220 CVE-2022-2795