Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:2954-1

Опубликовано: 24 июл. 2023
Источник: suse-cvrf

Описание

Security update for bind

This update for bind fixes the following issues:

  • CVE-2023-2828: Fixed denial-of-service against recursive resolvers related to cache-cleaning algorithm (bsc#1212544).

Список пакетов

Image SLES15-SP3-BYOS-Azure
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-BYOS-EC2-HVM
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-BYOS-GCE
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-CHOST-BYOS-Aliyun
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-CHOST-BYOS-Azure
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-CHOST-BYOS-EC2
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-CHOST-BYOS-GCE
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-CHOST-BYOS-SAP-CCloud
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-HPC-BYOS-Azure
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-HPC-BYOS-EC2-HVM
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-HPC-BYOS-GCE
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-Azure
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-EC2-HVM
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-Manager-4-2-Proxy-BYOS-GCE
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-Azure
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-EC2-HVM
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-Manager-4-2-Server-BYOS-GCE
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-SAP-BYOS-Azure
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-SAP-BYOS-EC2-HVM
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-SAP-BYOS-GCE
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-SAPCAL-Azure
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-SAPCAL-EC2-HVM
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
Image SLES15-SP3-SAPCAL-GCE
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
SUSE Enterprise Storage 7.1
bind-9.16.6-150300.22.30.1
bind-chrootenv-9.16.6-150300.22.30.1
bind-devel-9.16.6-150300.22.30.1
bind-doc-9.16.6-150300.22.30.1
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs-devel-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
bind-9.16.6-150300.22.30.1
bind-chrootenv-9.16.6-150300.22.30.1
bind-devel-9.16.6-150300.22.30.1
bind-doc-9.16.6-150300.22.30.1
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs-devel-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
bind-9.16.6-150300.22.30.1
bind-chrootenv-9.16.6-150300.22.30.1
bind-devel-9.16.6-150300.22.30.1
bind-doc-9.16.6-150300.22.30.1
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs-devel-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
SUSE Linux Enterprise Module for Basesystem 15 SP4
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
SUSE Linux Enterprise Module for Basesystem 15 SP5
bind-devel-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs-devel-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
SUSE Linux Enterprise Real Time 15 SP3
bind-9.16.6-150300.22.30.1
bind-chrootenv-9.16.6-150300.22.30.1
bind-devel-9.16.6-150300.22.30.1
bind-doc-9.16.6-150300.22.30.1
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs-devel-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
SUSE Linux Enterprise Server 15 SP3-LTSS
bind-9.16.6-150300.22.30.1
bind-chrootenv-9.16.6-150300.22.30.1
bind-devel-9.16.6-150300.22.30.1
bind-doc-9.16.6-150300.22.30.1
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs-devel-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
bind-9.16.6-150300.22.30.1
bind-chrootenv-9.16.6-150300.22.30.1
bind-devel-9.16.6-150300.22.30.1
bind-doc-9.16.6-150300.22.30.1
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs-devel-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
SUSE Manager Proxy 4.2
bind-9.16.6-150300.22.30.1
bind-chrootenv-9.16.6-150300.22.30.1
bind-devel-9.16.6-150300.22.30.1
bind-doc-9.16.6-150300.22.30.1
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs-devel-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
SUSE Manager Server 4.2
bind-9.16.6-150300.22.30.1
bind-chrootenv-9.16.6-150300.22.30.1
bind-devel-9.16.6-150300.22.30.1
bind-doc-9.16.6-150300.22.30.1
bind-utils-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs-devel-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1
python3-bind-9.16.6-150300.22.30.1
openSUSE Leap 15.4
bind-chrootenv-9.16.6-150300.22.30.1
bind-devel-9.16.6-150300.22.30.1
libbind9-1600-9.16.6-150300.22.30.1
libdns1605-9.16.6-150300.22.30.1
libirs-devel-9.16.6-150300.22.30.1
libirs1601-9.16.6-150300.22.30.1
libisc1606-9.16.6-150300.22.30.1
libisccc1600-9.16.6-150300.22.30.1
libisccfg1600-9.16.6-150300.22.30.1
libns1604-9.16.6-150300.22.30.1

Описание

Every `named` instance configured to run as a recursive resolver maintains a cache database holding the responses to the queries it has recently sent to authoritative servers. The size limit for that cache database can be configured using the `max-cache-size` statement in the configuration file; it defaults to 90% of the total amount of memory available on the host. When the size of the cache reaches 7/8 of the configured limit, a cache-cleaning algorithm starts to remove expired and/or least-recently used RRsets from the cache, to keep memory use below the configured limit. It has been discovered that the effectiveness of the cache-cleaning algorithm used in `named` can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured `max-cache-size` limit to be significantly exceeded. This issue affects BIND 9 versions 9.11.0 through 9.16.41, 9.18.0 through 9.18.15, 9.19.0 through 9.19.13, 9.11.3-S1 through 9.16.41-S1, and 9.18.11-S1 through 9.18.15-S1.


Затронутые продукты
Image SLES15-SP3-BYOS-Azure:bind-utils-9.16.6-150300.22.30.1
Image SLES15-SP3-BYOS-Azure:libbind9-1600-9.16.6-150300.22.30.1
Image SLES15-SP3-BYOS-Azure:libdns1605-9.16.6-150300.22.30.1
Image SLES15-SP3-BYOS-Azure:libirs1601-9.16.6-150300.22.30.1

Ссылки
Уязвимость SUSE-SU-2023:2954-1