SUSE-SU-2023:3796-1

Опубликовано: 26 сент. 2023

Источник: suse-cvrf

Описание

Security update for bind

This update for bind fixes the following issues:

CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly (bsc#1215472).

Список пакетов

Image SLES12-SP5-Azure-BYOS

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-Azure-Basic-On-Demand

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-Azure-HPC-BYOS

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-Azure-HPC-On-Demand

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-Azure-SAP-BYOS

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-Azure-SAP-On-Demand

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-Azure-Standard-On-Demand

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-EC2-BYOS

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-EC2-ECS-On-Demand

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-EC2-On-Demand

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-EC2-SAP-BYOS

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-EC2-SAP-On-Demand

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-GCE-BYOS

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-GCE-On-Demand

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-GCE-SAP-BYOS

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-GCE-SAP-On-Demand

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

SUSE Linux Enterprise Server 12 SP5

bind-9.11.22-3.49.1

bind-chrootenv-9.11.22-3.49.1

bind-doc-9.11.22-3.49.1

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisc1107-32bit-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

SUSE Linux Enterprise Server for SAP Applications 12 SP5

bind-9.11.22-3.49.1

bind-chrootenv-9.11.22-3.49.1

bind-doc-9.11.22-3.49.1

bind-utils-9.11.22-3.49.1

libbind9-161-9.11.22-3.49.1

libdns1110-9.11.22-3.49.1

libirs161-9.11.22-3.49.1

libisc1107-9.11.22-3.49.1

libisc1107-32bit-9.11.22-3.49.1

libisccc161-9.11.22-3.49.1

libisccfg163-9.11.22-3.49.1

liblwres161-9.11.22-3.49.1

python-bind-9.11.22-3.49.1

SUSE Linux Enterprise Software Development Kit 12 SP5

bind-devel-9.11.22-3.49.1

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20233796-1/
Link for SUSE-SU-2023:3796-1
https://lists.suse.com/pipermail/sle-security-updates/2023-September/016332.html
E-Mail link for SUSE-SU-2023:3796-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1215472
SUSE Bug 1215472
https://www.suse.com/security/cve/CVE-2023-3341/
SUSE CVE CVE-2023-3341 page

Описание

The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1.

Затронутые продукты

Image SLES12-SP5-Azure-BYOS:bind-utils-9.11.22-3.49.1

Image SLES12-SP5-Azure-BYOS:libbind9-161-9.11.22-3.49.1

Image SLES12-SP5-Azure-BYOS:libdns1110-9.11.22-3.49.1

Image SLES12-SP5-Azure-BYOS:libirs161-9.11.22-3.49.1

Ссылки

https://www.suse.com/security/cve/CVE-2023-3341.html
CVE-2023-3341
https://bugzilla.suse.com/1215472
SUSE Bug 1215472
https://bugzilla.suse.com/1216764
SUSE Bug 1216764
https://bugzilla.suse.com/1217453
SUSE Bug 1217453
https://bugzilla.suse.com/1217551
SUSE Bug 1217551
https://bugzilla.suse.com/1217600
SUSE Bug 1217600
https://bugzilla.suse.com/1221586
SUSE Bug 1221586
https://bugzilla.suse.com/1223092
SUSE Bug 1223092

SUSE-SU-2023:3796-1

Описание

Список пакетов

Image SLES12-SP5-Azure-BYOS

Image SLES12-SP5-Azure-Basic-On-Demand

Image SLES12-SP5-Azure-HPC-BYOS

Image SLES12-SP5-Azure-HPC-On-Demand

Image SLES12-SP5-Azure-SAP-BYOS

Image SLES12-SP5-Azure-SAP-On-Demand

Image SLES12-SP5-Azure-Standard-On-Demand

Image SLES12-SP5-EC2-BYOS

Image SLES12-SP5-EC2-ECS-On-Demand

Image SLES12-SP5-EC2-On-Demand

Image SLES12-SP5-EC2-SAP-BYOS

Image SLES12-SP5-EC2-SAP-On-Demand

Image SLES12-SP5-GCE-BYOS

Image SLES12-SP5-GCE-On-Demand

Image SLES12-SP5-GCE-SAP-BYOS

Image SLES12-SP5-GCE-SAP-On-Demand

Image SLES12-SP5-SAP-Azure-LI-BYOS-Production

Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production

SUSE Linux Enterprise Server 12 SP5

SUSE Linux Enterprise Server for SAP Applications 12 SP5

SUSE Linux Enterprise Software Development Kit 12 SP5

Ссылки

Уязвимость: CVE-2023-3341

Описание

Затронутые продукты

Ссылки