Recent Vulnerabilities Research Posts Trends Blog About Contact

Related Vulnerabilities: CVE-2023-2828

A vulnerability was found in BIND. The effectiveness of the cache-cleaning algorithm used in named can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured max-cache-size limit to exceed significantly. (CVE-2023-2828)

Source

ALAS2-2023-2112

Amazon Linux 2 Security Advisory: ALAS-2023-2112
Advisory Release Date: 2023-07-05 22:01 Pacific
Advisory Updated Date: 2023-07-19 22:27 Pacific

Severity: Important

References: CVE-2023-2828
FAQs regarding Amazon Linux ALAS/CVE Severity

Issue Overview:

A vulnerability was found in BIND. The effectiveness of the cache-cleaning algorithm used in named can be severely diminished by querying the resolver for specific RRsets in a certain order, effectively allowing the configured max-cache-size limit to exceed significantly. (CVE-2023-2828)

Affected Packages:

bind

Issue Correction:
Run yum update bind to update your system.

New Packages:

aarch64:
    bind-9.11.4-26.P2.amzn2.13.1.aarch64
    bind-pkcs11-9.11.4-26.P2.amzn2.13.1.aarch64
    bind-pkcs11-utils-9.11.4-26.P2.amzn2.13.1.aarch64
    bind-pkcs11-libs-9.11.4-26.P2.amzn2.13.1.aarch64
    bind-pkcs11-devel-9.11.4-26.P2.amzn2.13.1.aarch64
    bind-sdb-9.11.4-26.P2.amzn2.13.1.aarch64
    bind-libs-lite-9.11.4-26.P2.amzn2.13.1.aarch64
    bind-libs-9.11.4-26.P2.amzn2.13.1.aarch64
    bind-utils-9.11.4-26.P2.amzn2.13.1.aarch64
    bind-devel-9.11.4-26.P2.amzn2.13.1.aarch64
    bind-lite-devel-9.11.4-26.P2.amzn2.13.1.aarch64
    bind-chroot-9.11.4-26.P2.amzn2.13.1.aarch64
    bind-sdb-chroot-9.11.4-26.P2.amzn2.13.1.aarch64
    bind-export-libs-9.11.4-26.P2.amzn2.13.1.aarch64
    bind-export-devel-9.11.4-26.P2.amzn2.13.1.aarch64
    bind-debuginfo-9.11.4-26.P2.amzn2.13.1.aarch64

i686:
    bind-9.11.4-26.P2.amzn2.13.1.i686
    bind-pkcs11-9.11.4-26.P2.amzn2.13.1.i686
    bind-pkcs11-utils-9.11.4-26.P2.amzn2.13.1.i686
    bind-pkcs11-libs-9.11.4-26.P2.amzn2.13.1.i686
    bind-pkcs11-devel-9.11.4-26.P2.amzn2.13.1.i686
    bind-sdb-9.11.4-26.P2.amzn2.13.1.i686
    bind-libs-lite-9.11.4-26.P2.amzn2.13.1.i686
    bind-libs-9.11.4-26.P2.amzn2.13.1.i686
    bind-utils-9.11.4-26.P2.amzn2.13.1.i686
    bind-devel-9.11.4-26.P2.amzn2.13.1.i686
    bind-lite-devel-9.11.4-26.P2.amzn2.13.1.i686
    bind-chroot-9.11.4-26.P2.amzn2.13.1.i686
    bind-sdb-chroot-9.11.4-26.P2.amzn2.13.1.i686
    bind-export-libs-9.11.4-26.P2.amzn2.13.1.i686
    bind-export-devel-9.11.4-26.P2.amzn2.13.1.i686
    bind-debuginfo-9.11.4-26.P2.amzn2.13.1.i686

noarch:
    bind-license-9.11.4-26.P2.amzn2.13.1.noarch

src:
    bind-9.11.4-26.P2.amzn2.13.1.src

x86_64:
    bind-9.11.4-26.P2.amzn2.13.1.x86_64
    bind-pkcs11-9.11.4-26.P2.amzn2.13.1.x86_64
    bind-pkcs11-utils-9.11.4-26.P2.amzn2.13.1.x86_64
    bind-pkcs11-libs-9.11.4-26.P2.amzn2.13.1.x86_64
    bind-pkcs11-devel-9.11.4-26.P2.amzn2.13.1.x86_64
    bind-sdb-9.11.4-26.P2.amzn2.13.1.x86_64
    bind-libs-lite-9.11.4-26.P2.amzn2.13.1.x86_64
    bind-libs-9.11.4-26.P2.amzn2.13.1.x86_64
    bind-utils-9.11.4-26.P2.amzn2.13.1.x86_64
    bind-devel-9.11.4-26.P2.amzn2.13.1.x86_64
    bind-lite-devel-9.11.4-26.P2.amzn2.13.1.x86_64
    bind-chroot-9.11.4-26.P2.amzn2.13.1.x86_64
    bind-sdb-chroot-9.11.4-26.P2.amzn2.13.1.x86_64
    bind-export-libs-9.11.4-26.P2.amzn2.13.1.x86_64
    bind-export-devel-9.11.4-26.P2.amzn2.13.1.x86_64
    bind-debuginfo-9.11.4-26.P2.amzn2.13.1.x86_64

Additional References

Red Hat: CVE-2023-2828

Mitre: CVE-2023-2828

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

ALAS2-2023-2112

ALAS2-2023-2112

Additional References

Vulmon Search

About

Products

Connect