Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:3934-1

Опубликовано: 02 окт. 2023
Источник: suse-cvrf

Описание

Security update for bind

This update for bind fixes the following issues:

Security fixes:

  • CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly (bsc#1215472).

Other fixes:

  • Add dnstap support (jsc#PED-4853, jsc#PED-4852, bsc#1213748)

Список пакетов

Image SLES15-SP3-BYOS-Azure
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-BYOS-EC2-HVM
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-BYOS-GCE
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-CHOST-BYOS-Aliyun
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-CHOST-BYOS-Azure
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-CHOST-BYOS-EC2
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-CHOST-BYOS-GCE
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-CHOST-BYOS-SAP-CCloud
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-HPC-BYOS-Azure
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-HPC-BYOS-EC2-HVM
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-HPC-BYOS-GCE
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-SAP-BYOS-Azure
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-SAP-BYOS-EC2-HVM
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-SAP-BYOS-GCE
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-SAPCAL-Azure
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-SAPCAL-EC2-HVM
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
Image SLES15-SP3-SAPCAL-GCE
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
SUSE Enterprise Storage 7.1
bind-9.16.6-150300.22.41.1
bind-chrootenv-9.16.6-150300.22.41.1
bind-devel-9.16.6-150300.22.41.1
bind-doc-9.16.6-150300.22.41.1
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs-devel-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS
bind-9.16.6-150300.22.41.1
bind-chrootenv-9.16.6-150300.22.41.1
bind-devel-9.16.6-150300.22.41.1
bind-doc-9.16.6-150300.22.41.1
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs-devel-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
bind-9.16.6-150300.22.41.1
bind-chrootenv-9.16.6-150300.22.41.1
bind-devel-9.16.6-150300.22.41.1
bind-doc-9.16.6-150300.22.41.1
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs-devel-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
SUSE Linux Enterprise Server 15 SP3-LTSS
bind-9.16.6-150300.22.41.1
bind-chrootenv-9.16.6-150300.22.41.1
bind-devel-9.16.6-150300.22.41.1
bind-doc-9.16.6-150300.22.41.1
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs-devel-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
bind-9.16.6-150300.22.41.1
bind-chrootenv-9.16.6-150300.22.41.1
bind-devel-9.16.6-150300.22.41.1
bind-doc-9.16.6-150300.22.41.1
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs-devel-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
SUSE Manager Proxy 4.2
bind-9.16.6-150300.22.41.1
bind-chrootenv-9.16.6-150300.22.41.1
bind-devel-9.16.6-150300.22.41.1
bind-doc-9.16.6-150300.22.41.1
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs-devel-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1
SUSE Manager Server 4.2
bind-9.16.6-150300.22.41.1
bind-chrootenv-9.16.6-150300.22.41.1
bind-devel-9.16.6-150300.22.41.1
bind-doc-9.16.6-150300.22.41.1
bind-utils-9.16.6-150300.22.41.1
libbind9-1600-9.16.6-150300.22.41.1
libdns1605-9.16.6-150300.22.41.1
libirs-devel-9.16.6-150300.22.41.1
libirs1601-9.16.6-150300.22.41.1
libisc1606-9.16.6-150300.22.41.1
libisccc1600-9.16.6-150300.22.41.1
libisccfg1600-9.16.6-150300.22.41.1
libns1604-9.16.6-150300.22.41.1
python3-bind-9.16.6-150300.22.41.1

Ссылки

Описание

The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1.

Затронутые продукты
Image SLES15-SP3-BYOS-Azure:bind-utils-9.16.6-150300.22.41.1
Image SLES15-SP3-BYOS-Azure:libbind9-1600-9.16.6-150300.22.41.1
Image SLES15-SP3-BYOS-Azure:libdns1605-9.16.6-150300.22.41.1
Image SLES15-SP3-BYOS-Azure:libirs1601-9.16.6-150300.22.41.1
Ссылки
Уязвимость SUSE-SU-2023:3934-1