REDHAT-BUG-2298904: High severity ISC BIND 9 vulnerability
Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result in an assertion failure. This vulnerability affects upstream's bind9 versions bellow: 9.16.13 -> 9.16.50 9.18.0 -> 9.18.27 9.19.0 -> 9.19.24
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2298904?
REDHAT-BUG-2298904 is classified as a medium severity vulnerability due to its potential for assertion failure leading to service disruption.
How do I fix REDHAT-BUG-2298904?
To fix REDHAT-BUG-2298904, upgrade BIND 9 to versions 9.16.50, 9.18.27, or 9.19.24 or later.
Which versions of BIND are affected by REDHAT-BUG-2298904?
Versions of BIND affected by REDHAT-BUG-2298904 include those below 9.16.50, 9.18.27, and 9.19.24.
What causes the vulnerability REDHAT-BUG-2298904?
REDHAT-BUG-2298904 is caused by client queries that may trigger stale data serving and require lookups in local authoritative zone data.
Is there a workaround for REDHAT-BUG-2298904?
There are no official workarounds for REDHAT-BUG-2298904; upgrading to a fixed version is the recommended action.