Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CentOS BIND could slow down or exhaust memory
published 4 years ago
Summary
The BIND DNS server packages for CentOS (including chroot, development, and export versions) have been updated to fix a slowdown when handling large delegations and two memory‑leak problems in DNSSEC verification. These issues could cause the server to perform poorly or run out of memory, potentially disrupting name‑resolution services. Apply the latest CentOS BIND updates as soon as possible to resolve the problems.
What to do
- Update centos bind to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos bind-chroot to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos bind-devel to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos bind-export-devel to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos bind-export-libs to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos bind-libs to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos bind-libs-lite to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos bind-license to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos bind-lite-devel to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos bind-pkcs11 to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos bind-pkcs11-devel to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos bind-pkcs11-libs to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos bind-pkcs11-utils to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos bind-sdb to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos bind-sdb-chroot to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos bind-utils to version 32:9.11.26-6.el8.tuxcare.els3.
- Update centos python3-bind to version 32:9.11.26-6.el8.tuxcare.els3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:CentOS:8.5 | centos | bind |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | bind-chroot |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | bind-devel |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | bind-export-devel |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | bind-export-libs |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | bind-libs |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | bind-libs-lite |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | bind-license |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | bind-lite-devel |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | bind-pkcs11 |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | bind-pkcs11-devel |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | bind-pkcs11-libs |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | bind-pkcs11-utils |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | bind-sdb |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | bind-sdb-chroot |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | bind-utils |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
| TuxCare:CentOS:8.5 | centos | python3-bind |
< 32:9.11.26-6.el8.tuxcare.els3 Fix: upgrade to 32:9.11.26-6.el8.tuxcare.els3
|
Original advisory text
Fixed CVEs in bind: CVE-2022-38177, CVE-2022-38178, CVE-2022-2795
- CVE-2022-2795: fix possible resolver performance degradation when processing large delegations
- CVE-2022-38177: fix memory leak in ECDSA DNSSEC verification code
- CVE-2022-38178: fix memory leak in EdDSA DNSSEC verification code
- CVE-2022-38177: fix memory leak in ECDSA DNSSEC verification code
- CVE-2022-38178: fix memory leak in EdDSA DNSSEC verification code
References
Timeline
Published29 Sep 2022
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2022-1664476909 · OSV
Track software like this
Free during beta