Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
Red Hat Bind Server Software Has Critical Security Flaw
published 2 years ago
Summary
A critical security issue has been found in the Bind DNS server software used by Red Hat systems. This flaw could allow an attacker to execute malicious code on a server, potentially leading to unauthorized access or data theft. Users should update their Bind software as soon as possible to fix the issue.
What to do
- Update redhat bind to version 32:9.16.23-14.el9_3.4.
- Update redhat bind-chroot to version 32:9.16.23-14.el9_3.4.
- Update redhat bind-debuginfo to version 32:9.16.23-14.el9_3.4.
- Update redhat bind-debugsource to version 32:9.16.23-14.el9_3.4.
- Update redhat bind-devel to version 32:9.16.23-14.el9_3.4.
- Update redhat bind-dnssec-doc to version 32:9.16.23-14.el9_3.4.
- Update redhat bind-dnssec-utils to version 32:9.16.23-14.el9_3.4.
- Update redhat bind-dnssec-utils-debuginfo to version 32:9.16.23-14.el9_3.4.
- Update redhat bind-doc to version 32:9.16.23-14.el9_3.4.
- Update redhat bind-dyndb-ldap to version 0:11.9-8.el9_3.3.
- Update redhat bind-dyndb-ldap-debuginfo to version 0:11.9-8.el9_3.3.
- Update redhat bind-dyndb-ldap-debugsource to version 0:11.9-8.el9_3.3.
- Update redhat bind-libs to version 32:9.16.23-14.el9_3.4.
- Update redhat bind-libs-debuginfo to version 32:9.16.23-14.el9_3.4.
- Update redhat bind-license to version 32:9.16.23-14.el9_3.4.
- Update redhat bind-utils to version 32:9.16.23-14.el9_3.4.
- Update redhat bind-utils-debuginfo to version 32:9.16.23-14.el9_3.4.
- Update redhat python3-bind to version 32:9.16.23-14.el9_3.4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:enterprise_linux:9::appstream | redhat | bind |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-chroot |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-debuginfo |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-debugsource |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-devel |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-dnssec-doc |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-dnssec-utils |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-dnssec-utils-debuginfo |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-doc |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-dyndb-ldap |
< 0:11.9-8.el9_3.3 Fix: upgrade to 0:11.9-8.el9_3.3
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-dyndb-ldap-debuginfo |
< 0:11.9-8.el9_3.3 Fix: upgrade to 0:11.9-8.el9_3.3
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-dyndb-ldap-debugsource |
< 0:11.9-8.el9_3.3 Fix: upgrade to 0:11.9-8.el9_3.3
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-libs |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-libs-debuginfo |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-license |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-utils |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::appstream | redhat | bind-utils-debuginfo |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::appstream | redhat | python3-bind |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::crb | redhat | bind |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::crb | redhat | bind-chroot |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::crb | redhat | bind-debuginfo |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::crb | redhat | bind-debugsource |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::crb | redhat | bind-devel |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::crb | redhat | bind-dnssec-doc |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::crb | redhat | bind-dnssec-utils |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::crb | redhat | bind-dnssec-utils-debuginfo |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::crb | redhat | bind-doc |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::crb | redhat | bind-libs |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::crb | redhat | bind-libs-debuginfo |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::crb | redhat | bind-license |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::crb | redhat | bind-utils |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::crb | redhat | bind-utils-debuginfo |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
| Red Hat:enterprise_linux:9::crb | redhat | python3-bind |
< 32:9.16.23-14.el9_3.4 Fix: upgrade to 32:9.16.23-14.el9_3.4
|
Original advisory text
Red Hat Security Advisory: bind security update
References
- https://access.redhat.com/errata/RHSA-2024:1789 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#important Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2263896 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2263897 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2263909 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2263911 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2263914 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2263917 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1789.j... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2023-4408 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-4408 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-4408 Vendor Advisory
- https://kb.isc.org/docs/cve-2023-4408 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-5517 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-5517 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-5517 Vendor Advisory
- https://kb.isc.org/docs/cve-2023-5517 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-5679 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-5679 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-5679 Vendor Advisory
- https://kb.isc.org/docs/cve-2023-5679 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-6516 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-6516 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-6516 Vendor Advisory
- https://kb.isc.org/docs/cve-2023-6516 Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-50387 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-50387 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-50387 Vendor Advisory
- https://blog.powerdns.com/2024/02/13/powerdns-recursor-4-8-6-4-9-3-5-0-2-release... Third Party Advisory
- https://kb.isc.org/docs/cve-2023-50387 Third Party Advisory
- https://www.knot-resolver.cz/2024-02-13-knot-resolver-5.7.1.html Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2023-50868 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-50868 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-50868 Vendor Advisory
- https://kb.isc.org/docs/cve-2023-50868 Third Party Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published16 Sep 2024
Updated23 Apr 2026
First seen23 Apr 2026
Sources
RHSA-2024:1789 · OSV
Track software like this
Free during beta