Security update for bind SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:3796-1 Final 1 1 2023-09-26T16:06:50Z current 2023-09-26T16:06:50Z 2023-09-26T16:06:50Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for bind This update for bind fixes the following issues: - CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly (bsc#1215472). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-3796,SUSE-SLE-SDK-12-SP5-2023-3796,SUSE-SLE-SERVER-12-SP5-2023-3796 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20233796-1/ Link for SUSE-SU-2023:3796-1 https://lists.suse.com/pipermail/sle-security-updates/2023-September/016332.html E-Mail link for SUSE-SU-2023:3796-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1215472 SUSE Bug 1215472 https://www.suse.com/security/cve/CVE-2023-3341/ SUSE CVE CVE-2023-3341 page SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 bind-9.11.22-3.49.1 bind-chrootenv-9.11.22-3.49.1 bind-devel-9.11.22-3.49.1 bind-devel-32bit-9.11.22-3.49.1 bind-devel-64bit-9.11.22-3.49.1 bind-doc-9.11.22-3.49.1 bind-lwresd-9.11.22-3.49.1 bind-utils-9.11.22-3.49.1 libbind9-161-9.11.22-3.49.1 libbind9-161-32bit-9.11.22-3.49.1 libbind9-161-64bit-9.11.22-3.49.1 libdns1110-9.11.22-3.49.1 libdns1110-32bit-9.11.22-3.49.1 libdns1110-64bit-9.11.22-3.49.1 libirs-devel-9.11.22-3.49.1 libirs161-9.11.22-3.49.1 libirs161-32bit-9.11.22-3.49.1 libirs161-64bit-9.11.22-3.49.1 libisc1107-9.11.22-3.49.1 libisc1107-32bit-9.11.22-3.49.1 libisc1107-64bit-9.11.22-3.49.1 libisccc161-9.11.22-3.49.1 libisccc161-32bit-9.11.22-3.49.1 libisccc161-64bit-9.11.22-3.49.1 libisccfg163-9.11.22-3.49.1 libisccfg163-32bit-9.11.22-3.49.1 libisccfg163-64bit-9.11.22-3.49.1 liblwres161-9.11.22-3.49.1 liblwres161-32bit-9.11.22-3.49.1 liblwres161-64bit-9.11.22-3.49.1 python-bind-9.11.22-3.49.1 bind-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server 12 SP5 bind-chrootenv-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server 12 SP5 bind-doc-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server 12 SP5 bind-utils-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server 12 SP5 libbind9-161-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server 12 SP5 libdns1110-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server 12 SP5 libirs161-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server 12 SP5 libisc1107-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server 12 SP5 libisc1107-32bit-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server 12 SP5 libisccc161-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server 12 SP5 libisccfg163-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server 12 SP5 liblwres161-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server 12 SP5 python-bind-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server 12 SP5 bind-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 bind-chrootenv-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 bind-doc-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 bind-utils-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libbind9-161-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libdns1110-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libirs161-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libisc1107-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libisc1107-32bit-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libisccc161-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libisccfg163-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 liblwres161-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 python-bind-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 bind-devel-9.11.22-3.49.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of available stack memory, causing `named` to terminate unexpectedly. Since each incoming control channel message is fully parsed before its contents are authenticated, exploiting this flaw does not require the attacker to hold a valid RNDC key; only network access to the control channel's configured TCP port is necessary. This issue affects BIND 9 versions 9.2.0 through 9.16.43, 9.18.0 through 9.18.18, 9.19.0 through 9.19.16, 9.9.3-S1 through 9.16.43-S1, and 9.18.0-S1 through 9.18.18-S1. CVE-2023-3341 SUSE Linux Enterprise Server 12 SP5:bind-9.11.22-3.49.1 SUSE Linux Enterprise Server 12 SP5:bind-chrootenv-9.11.22-3.49.1 SUSE Linux Enterprise Server 12 SP5:bind-doc-9.11.22-3.49.1 SUSE Linux Enterprise Server 12 SP5:bind-utils-9.11.22-3.49.1 SUSE Linux Enterprise Server 12 SP5:libbind9-161-9.11.22-3.49.1 SUSE Linux Enterprise Server 12 SP5:libdns1110-9.11.22-3.49.1 SUSE Linux Enterprise Server 12 SP5:libirs161-9.11.22-3.49.1 SUSE Linux Enterprise Server 12 SP5:libisc1107-32bit-9.11.22-3.49.1 SUSE Linux Enterprise Server 12 SP5:libisc1107-9.11.22-3.49.1 SUSE Linux Enterprise Server 12 SP5:libisccc161-9.11.22-3.49.1 SUSE Linux Enterprise Server 12 SP5:libisccfg163-9.11.22-3.49.1 SUSE Linux Enterprise Server 12 SP5:liblwres161-9.11.22-3.49.1 SUSE Linux Enterprise Server 12 SP5:python-bind-9.11.22-3.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:bind-9.11.22-3.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:bind-chrootenv-9.11.22-3.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:bind-doc-9.11.22-3.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:bind-utils-9.11.22-3.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libbind9-161-9.11.22-3.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libdns1110-9.11.22-3.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libirs161-9.11.22-3.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libisc1107-32bit-9.11.22-3.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libisc1107-9.11.22-3.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libisccc161-9.11.22-3.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libisccfg163-9.11.22-3.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:liblwres161-9.11.22-3.49.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:python-bind-9.11.22-3.49.1 SUSE Linux Enterprise Software Development Kit 12 SP5:bind-devel-9.11.22-3.49.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2023/suse-su-20233796-1/ https://www.suse.com/security/cve/CVE-2023-3341.html CVE-2023-3341 https://bugzilla.suse.com/1215472 SUSE Bug 1215472