Oracle Linux: CVE-2022-3736: ELSA-2023-2261: bind security and bug fix update (MODERATE) (Multiple Advisories)
Description
BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1. A flaw was found in Bind, where a resolver crash is possible. When stale cache and stale answers are enabled, the option stale-answer-client-timeout is set to a positive integer, and the resolver receives an RRSIG query.
Solution(s)
- oracle-linux-upgrade-bind9-16
- oracle-linux-upgrade-bind9-16-chroot
- oracle-linux-upgrade-bind9-16-devel
- oracle-linux-upgrade-bind9-16-dnssec-utils
- oracle-linux-upgrade-bind9-16-doc
- oracle-linux-upgrade-bind9-16-libs
- oracle-linux-upgrade-bind9-16-license
- oracle-linux-upgrade-bind9-16-utils
- oracle-linux-upgrade-python3-bind9-16
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center