- Vulnerability/
- RHSA-2022:6781
RHSA-2022:6781: Important: bind9.16 security update
First published: Tue Oct 04 2022(Updated: )
The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.<br>Security Fix(es):<br><li> bind: BIND 9 resolvers configured to answer from cache with zero stale-answer-timeout may terminate unexpectedly (CVE-2022-3080)</li> <li> bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177)</li> <li> bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/bind9.16 | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16 | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-chroot | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-debuginfo | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-debugsource | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-dnssec-utils-debuginfo | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-libs | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-libs-debuginfo | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-license | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-utils | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-utils-debuginfo | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-chroot | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-debuginfo | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-debugsource | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-dnssec-utils-debuginfo | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-libs | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-libs-debuginfo | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-utils | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-utils-debuginfo | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16 | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-chroot | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-debuginfo | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-debugsource | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-dnssec-utils-debuginfo | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-libs | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-libs-debuginfo | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-utils | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-utils-debuginfo | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16 | <9.16.23-0.7.el8_6.1.aa | 9.16.23-0.7.el8_6.1.aa |
| redhat/bind9.16-chroot | <9.16.23-0.7.el8_6.1.aa | 9.16.23-0.7.el8_6.1.aa |
| redhat/bind9.16-debuginfo | <9.16.23-0.7.el8_6.1.aa | 9.16.23-0.7.el8_6.1.aa |
| redhat/bind9.16-debugsource | <9.16.23-0.7.el8_6.1.aa | 9.16.23-0.7.el8_6.1.aa |
| redhat/bind9.16-dnssec-utils-debuginfo | <9.16.23-0.7.el8_6.1.aa | 9.16.23-0.7.el8_6.1.aa |
| redhat/bind9.16-libs | <9.16.23-0.7.el8_6.1.aa | 9.16.23-0.7.el8_6.1.aa |
| redhat/bind9.16-libs-debuginfo | <9.16.23-0.7.el8_6.1.aa | 9.16.23-0.7.el8_6.1.aa |
| redhat/bind9.16-utils | <9.16.23-0.7.el8_6.1.aa | 9.16.23-0.7.el8_6.1.aa |
| redhat/bind9.16-utils-debuginfo | <9.16.23-0.7.el8_6.1.aa | 9.16.23-0.7.el8_6.1.aa |
| redhat/bind9.16-devel | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-devel | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-dnssec-utils | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-doc | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/python3-bind9.16 | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-devel | <9.16.23-0.7.el8_6.1.aa | 9.16.23-0.7.el8_6.1.aa |
| redhat/bind9.16-dnssec-utils | <9.16.23-0.7.el8_6.1.aa | 9.16.23-0.7.el8_6.1.aa |
| redhat/bind9.16-dnssec-utils | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-devel | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
| redhat/bind9.16-dnssec-utils | <9.16.23-0.7.el8_6.1 | 9.16.23-0.7.el8_6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of RHSA-2022:6781?
The severity of RHSA-2022:6781 is categorized as critical due to vulnerabilities within the BIND implementation.
How do I fix RHSA-2022:6781?
To fix RHSA-2022:6781, you need to update to version 9.16.23-0.7.el8_6.1 or later of the affected BIND packages.
Which software is affected by RHSA-2022:6781?
RHSA-2022:6781 affects various BIND9.16 packages including bind9.16, bind9.16-debuginfo, bind9.16-libs, and others.
Is documentation available for RHSA-2022:6781?
Yes, there is documentation related to RHSA-2022:6781 which provides details on the vulnerabilities and the remediation steps.
Where can I find more information on RHSA-2022:6781?
More information on RHSA-2022:6781 can be found in the advisories and bug reports related to the Red Hat security updates.
- agent/severity
- agent/type
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/remedy
- agent/references
- agent/title
- agent/description
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2022:6781
- agent/software-canonical-lookup
- agent/event
- agent/trending
- agent/tags
- agent/source
- package-manager/redhat