An update for bind and bind-dyndb-ldap is now available for Red Hat Enterprise
 Linux 6 Extended Lifecycle Support  - EXTENSION.

Red Hat Product Security has rated this update as having a security impact of
 Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain
 Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.

Security Fix(es):

* bind: stack exhaustion in control channel code may lead to DoS
 (CVE-2023-3341)

* bind9: Parsing large DNS messages may cause excessive CPU load
 (CVE-2023-4408)

* bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)

* bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources
 (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS
 score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2023-3341: Improper Input Validation (CWE-20)
CVE-2023-4408: Uncontrolled Resource Consumption (CWE-400)
CVE-2023-50387: Uncontrolled Resource Consumption (CWE-400)
CVE-2023-50868: Uncontrolled Resource Consumption (CWE-400)