SUSE-SU-2023:3821-1

Опубликовано: 27 сент. 2023

Источник: suse-cvrf

Описание

Security update for bind

This update for bind fixes the following issues:

Update to release 9.16.44:

CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly (bsc#1215472).

Update to release 9.16.43

Processing already-queued queries received over TCP could cause an assertion failure, when the server was reconfigured at the same time or the cache was being flushed. This has been fixed.

Список пакетов

Image SLES15-SP5-Azure-3P

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Azure-Basic

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Azure-Standard

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-BYOS-Azure

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-BYOS-EC2

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-BYOS-GCE

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-CHOST-BYOS-Aliyun

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-CHOST-BYOS-Azure

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-CHOST-BYOS-EC2

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-CHOST-BYOS-GCE

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-CHOST-BYOS-GDC

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-EC2

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-GCE

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-HPC-Azure

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-HPC-BYOS-Azure

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-HPC-BYOS-EC2

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-HPC-BYOS-GCE

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Hardened-BYOS-Azure

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Hardened-BYOS-EC2

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Hardened-BYOS-GCE

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Manager-Proxy-5-0-BYOS

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Manager-Server-5-0

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Manager-Server-5-0-BYOS

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Micro-5-5

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Micro-5-5-Azure

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Micro-5-5-BYOS

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Micro-5-5-BYOS-Azure

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Micro-5-5-BYOS-EC2

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Micro-5-5-EC2

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAP-Azure-3P

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAP-Azure-LI-BYOS

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAP-Azure-VLI-BYOS

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAP-BYOS-Azure

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAP-BYOS-EC2

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAP-BYOS-GCE

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAP-Hardened-Azure

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAP-Hardened-GCE

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAPCAL-Azure

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAPCAL-EC2

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-SAPCAL-GCE

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

SUSE Linux Enterprise Module for Basesystem 15 SP5

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

SUSE Linux Enterprise Module for Server Applications 15 SP5

bind-9.16.44-150500.8.12.2

bind-doc-9.16.44-150500.8.12.2

openSUSE Leap 15.5

bind-9.16.44-150500.8.12.2

bind-doc-9.16.44-150500.8.12.2

bind-utils-9.16.44-150500.8.12.2

python3-bind-9.16.44-150500.8.12.2

Ссылки

https://www.suse.com/support/update/announcement/2023/suse-su-20233821-1/
Link for SUSE-SU-2023:3821-1
https://lists.suse.com/pipermail/sle-updates/2023-September/031744.html
E-Mail link for SUSE-SU-2023:3821-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1215472
SUSE Bug 1215472
https://www.suse.com/security/cve/CVE-2023-3341/
SUSE CVE CVE-2023-3341 page

Описание

The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1.

Затронутые продукты

Image SLES15-SP5-Azure-3P:bind-utils-9.16.44-150500.8.12.2

Image SLES15-SP5-Azure-3P:python3-bind-9.16.44-150500.8.12.2

Image SLES15-SP5-Azure-Basic:bind-utils-9.16.44-150500.8.12.2

Image SLES15-SP5-Azure-Basic:python3-bind-9.16.44-150500.8.12.2

Ссылки

https://www.suse.com/security/cve/CVE-2023-3341.html
CVE-2023-3341
https://bugzilla.suse.com/1215472
SUSE Bug 1215472
https://bugzilla.suse.com/1216764
SUSE Bug 1216764
https://bugzilla.suse.com/1217453
SUSE Bug 1217453
https://bugzilla.suse.com/1217551
SUSE Bug 1217551
https://bugzilla.suse.com/1217600
SUSE Bug 1217600
https://bugzilla.suse.com/1221586
SUSE Bug 1221586
https://bugzilla.suse.com/1223092
SUSE Bug 1223092

SUSE-SU-2023:3821-1

Описание

Список пакетов

Image SLES15-SP5-Azure-3P

Image SLES15-SP5-Azure-Basic

Image SLES15-SP5-Azure-Standard

Image SLES15-SP5-BYOS-Azure

Image SLES15-SP5-BYOS-EC2

Image SLES15-SP5-BYOS-GCE

Image SLES15-SP5-CHOST-BYOS-Aliyun

Image SLES15-SP5-CHOST-BYOS-Azure

Image SLES15-SP5-CHOST-BYOS-EC2

Image SLES15-SP5-CHOST-BYOS-GCE

Image SLES15-SP5-CHOST-BYOS-GDC

Image SLES15-SP5-CHOST-BYOS-SAP-CCloud

Image SLES15-SP5-EC2

Image SLES15-SP5-GCE

Image SLES15-SP5-HPC-Azure

Image SLES15-SP5-HPC-BYOS-Azure

Image SLES15-SP5-HPC-BYOS-EC2

Image SLES15-SP5-HPC-BYOS-GCE

Image SLES15-SP5-Hardened-BYOS-Azure

Image SLES15-SP5-Hardened-BYOS-EC2

Image SLES15-SP5-Hardened-BYOS-GCE

Image SLES15-SP5-Manager-Proxy-5-0-BYOS

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure

Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2

Image SLES15-SP5-Manager-Server-5-0

Image SLES15-SP5-Manager-Server-5-0-Azure-llc

Image SLES15-SP5-Manager-Server-5-0-Azure-ltd

Image SLES15-SP5-Manager-Server-5-0-BYOS

Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure

Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2

Image SLES15-SP5-Manager-Server-5-0-EC2-llc

Image SLES15-SP5-Manager-Server-5-0-EC2-ltd

Image SLES15-SP5-Micro-5-5

Image SLES15-SP5-Micro-5-5-Azure

Image SLES15-SP5-Micro-5-5-BYOS

Image SLES15-SP5-Micro-5-5-BYOS-Azure

Image SLES15-SP5-Micro-5-5-BYOS-EC2

Image SLES15-SP5-Micro-5-5-EC2

Image SLES15-SP5-SAP-Azure-3P

Image SLES15-SP5-SAP-Azure-LI-BYOS

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

Image SLES15-SP5-SAP-Azure-VLI-BYOS

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP5-SAP-BYOS-Azure

Image SLES15-SP5-SAP-BYOS-EC2

Image SLES15-SP5-SAP-BYOS-GCE

Image SLES15-SP5-SAP-Hardened-Azure

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

Image SLES15-SP5-SAP-Hardened-GCE

Image SLES15-SP5-SAPCAL-Azure

Image SLES15-SP5-SAPCAL-EC2

Image SLES15-SP5-SAPCAL-GCE

SUSE Linux Enterprise Module for Basesystem 15 SP5

SUSE Linux Enterprise Module for Server Applications 15 SP5

openSUSE Leap 15.5

Ссылки

Уязвимость: CVE-2023-3341

Описание

Затронутые продукты

Ссылки