June 22, 2023

The Internet Systems Consortium (ISC) has published patches to address various security vulnerabilities in the Berkeley Internet Name Domain (BIND) 9 Domain Name System (DNS) software suite that might lead to a denial-of-service (DoS).

The Vulnerabilities

• CVE-2023-2911
• CVE-2023-2829
• CVE-2023-2828

Affected Versions

BIND:

• 9.16.33 -> 9.16.41
• 9.18.7 -> 9.18.15

BIND Supported Preview Edition

• 9.16.33-S1 -> 9.16.41-S1
• 9.18.11-S1 -> 9.18.15-S1

Mitigation

CYREBRO recommends users of BIND to the patched versions listed in ISC security advisories.

References: ISC Security Advisories