# CVE-2022-3736: bind9.16-chroot: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols CVE-2022-3736 is fixed in 46 products on 1 platform, first by bind9 1:9.18.1-1ubuntu1.3, released January 24, 2023. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2022-3736 - Priority: High - CVSS: 7.5 (Moderate) - EPSS: 0.4843 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jan 24, 2023 ## Description The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: processing large delegations may severely degrade resolver performance (CVE-2022-2795) * bind: flooding with UPDATE requests may lead to DoS (CVE-2022-3094) * bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3736) * bind: sending specific queries to the resolver may cause a DoS (CVE-2022-3924) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | bind RHEL 9 | 32:9.16.23-11.el9 | [RHSA-2023:2261](https://patchblox.com/security/data/fix/linux/rhsa-2023-2261.md) | May 9, 2023 | | Linux | bind almalinux 9 | 32:9.16.23-11.el9 | [ALSA-2023:2261](https://patchblox.com/security/data/fix/linux/alsa-2023-2261.md) | May 9, 2023 | | Linux | bind amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind ol 9 | 32:9.16.23-11.el9 | [ELSA-2023-2261](https://patchblox.com/security/data/fix/linux/elsa-2023-2261.md) | May 15, 2023 | | Linux | bind-chroot RHEL 9 | 32:9.16.23-11.el9 | [RHSA-2023:2261](https://patchblox.com/security/data/fix/linux/rhsa-2023-2261.md) | May 9, 2023 | | Linux | bind-chroot almalinux 9 | 32:9.16.23-11.el9 | [ALSA-2023:2261](https://patchblox.com/security/data/fix/linux/alsa-2023-2261.md) | May 9, 2023 | | Linux | bind-chroot amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-chroot ol 9 | 32:9.16.23-11.el9 | [ELSA-2023-2261](https://patchblox.com/security/data/fix/linux/elsa-2023-2261.md) | May 15, 2023 | | Linux | bind-debuginfo amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-debugsource amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-devel RHEL 9 | 32:9.16.23-11.el9 | [RHSA-2023:2261](https://patchblox.com/security/data/fix/linux/rhsa-2023-2261.md) | May 9, 2023 | | Linux | bind-devel almalinux 9 | 32:9.16.23-11.el9 | [ALSA-2023:2261](https://patchblox.com/security/data/fix/linux/alsa-2023-2261.md) | May 9, 2023 | | Linux | bind-devel amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-devel ol 9 | 32:9.16.23-11.el9 | [ELSA-2023-2261](https://patchblox.com/security/data/fix/linux/elsa-2023-2261.md) | May 15, 2023 | | Linux | bind-dlz-filesystem amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-dlz-filesystem-debuginfo amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-dlz-ldap amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-dlz-ldap-debuginfo amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-dlz-mysql amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-dlz-mysql-debuginfo amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-dlz-sqlite3 amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-dlz-sqlite3-debuginfo amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-dnssec-doc RHEL 9 | 32:9.16.23-11.el9 | [RHSA-2023:2261](https://patchblox.com/security/data/fix/linux/rhsa-2023-2261.md) | May 9, 2023 | | Linux | bind-dnssec-doc almalinux 9 | 32:9.16.23-11.el9 | [ALSA-2023:2261](https://patchblox.com/security/data/fix/linux/alsa-2023-2261.md) | May 9, 2023 | | Linux | bind-dnssec-doc amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-dnssec-doc ol 9 | 32:9.16.23-11.el9 | [ELSA-2023-2261](https://patchblox.com/security/data/fix/linux/elsa-2023-2261.md) | May 15, 2023 | | Linux | bind-dnssec-utils RHEL 9 | 32:9.16.23-11.el9 | [RHSA-2023:2261](https://patchblox.com/security/data/fix/linux/rhsa-2023-2261.md) | May 9, 2023 | | Linux | bind-dnssec-utils almalinux 9 | 32:9.16.23-11.el9 | [ALSA-2023:2261](https://patchblox.com/security/data/fix/linux/alsa-2023-2261.md) | May 9, 2023 | | Linux | bind-dnssec-utils amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-dnssec-utils ol 9 | 32:9.16.23-11.el9 | [ELSA-2023-2261](https://patchblox.com/security/data/fix/linux/elsa-2023-2261.md) | May 15, 2023 | | Linux | bind-dnssec-utils-debuginfo amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-doc RHEL 9 | 32:9.16.23-11.el9 | [RHSA-2023:2261](https://patchblox.com/security/data/fix/linux/rhsa-2023-2261.md) | May 9, 2023 | | Linux | bind-doc almalinux 9 | 32:9.16.23-11.el9 | [ALSA-2023:2261](https://patchblox.com/security/data/fix/linux/alsa-2023-2261.md) | May 9, 2023 | | Linux | bind-doc ol 9 | 32:9.16.23-11.el9 | [ELSA-2023-2261](https://patchblox.com/security/data/fix/linux/elsa-2023-2261.md) | May 15, 2023 | | Linux | bind-libs RHEL 9 | 32:9.16.23-11.el9 | [RHSA-2023:2261](https://patchblox.com/security/data/fix/linux/rhsa-2023-2261.md) | May 9, 2023 | | Linux | bind-libs almalinux 9 | 32:9.16.23-11.el9 | [ALSA-2023:2261](https://patchblox.com/security/data/fix/linux/alsa-2023-2261.md) | May 9, 2023 | | Linux | bind-libs amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-libs ol 9 | 32:9.16.23-11.el9 | [ELSA-2023-2261](https://patchblox.com/security/data/fix/linux/elsa-2023-2261.md) | May 15, 2023 | | Linux | bind-libs-debuginfo amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-license RHEL 9 | 32:9.16.23-11.el9 | [RHSA-2023:2261](https://patchblox.com/security/data/fix/linux/rhsa-2023-2261.md) | May 9, 2023 | | Linux | bind-license almalinux 9 | 32:9.16.23-11.el9 | [ALSA-2023:2261](https://patchblox.com/security/data/fix/linux/alsa-2023-2261.md) | May 9, 2023 | | Linux | bind-license amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-license ol 9 | 32:9.16.23-11.el9 | [ELSA-2023-2261](https://patchblox.com/security/data/fix/linux/elsa-2023-2261.md) | May 15, 2023 | | Linux | bind-pkcs11 amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-pkcs11-debuginfo amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-pkcs11-devel amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-pkcs11-libs amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-pkcs11-libs-debuginfo amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-pkcs11-utils amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-pkcs11-utils-debuginfo amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-utils RHEL 9 | 32:9.16.23-11.el9 | [RHSA-2023:2261](https://patchblox.com/security/data/fix/linux/rhsa-2023-2261.md) | May 9, 2023 | | Linux | bind-utils almalinux 9 | 32:9.16.23-11.el9 | [ALSA-2023:2261](https://patchblox.com/security/data/fix/linux/alsa-2023-2261.md) | May 9, 2023 | | Linux | bind-utils amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind-utils ol 9 | 32:9.16.23-11.el9 | [ELSA-2023-2261](https://patchblox.com/security/data/fix/linux/elsa-2023-2261.md) | May 15, 2023 | | Linux | bind-utils-debuginfo amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | bind9 Debian 12.15 (bookworm) | 1:9.18.11-1 | [DEBIAN-CVE-2022-3736](https://patchblox.com/security/data/fix/linux/debian-cve-2022-3736.md) | Jan 26, 2023 | | Linux | bind9 Debian 13.5 (trixie) | 1:9.18.11-1 | [DEBIAN-CVE-2022-3736](https://patchblox.com/security/data/fix/linux/debian-cve-2022-3736.md) | Jan 26, 2023 | | Linux | bind9 Debian 14 | 1:9.18.11-1 | [DEBIAN-CVE-2022-3736](https://patchblox.com/security/data/fix/linux/debian-cve-2022-3736.md) | Jan 26, 2023 | | Linux | bind9 Ubuntu 22.04.1 LTS (jammy) | 1:9.18.1-1ubuntu1.3 | [bind9 1:9.18.1-1ubuntu1.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-bind9-1-9.18.1-1ubuntu1.3.md) | Jan 24, 2023 | | Linux | bind9-dnsutils Ubuntu 22.04.1 LTS (jammy) | 1:9.18.1-1ubuntu1.3 | [bind9-dnsutils 1:9.18.1-1ubuntu1.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-bind9-dnsutils-1-9.18.1-1ubuntu1.3.md) | Jan 24, 2023 | | Linux | bind9-host Ubuntu 22.04.1 LTS (jammy) | 1:9.18.1-1ubuntu1.3 | [bind9-host 1:9.18.1-1ubuntu1.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-bind9-host-1-9.18.1-1ubuntu1.3.md) | Jan 24, 2023 | | Linux | bind9-libs Ubuntu 22.04.1 LTS (jammy) | 1:9.18.1-1ubuntu1.3 | [bind9-libs 1:9.18.1-1ubuntu1.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-bind9-libs-1-9.18.1-1ubuntu1.3.md) | Jan 24, 2023 | | Linux | bind9-utils Ubuntu 22.04.1 LTS (jammy) | 1:9.18.1-1ubuntu1.3 | [bind9-utils 1:9.18.1-1ubuntu1.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-bind9-utils-1-9.18.1-1ubuntu1.3.md) | Jan 24, 2023 | | Linux | bind9.16 RHEL 8 | 32:9.16.23-0.14.el8 | [RHSA-2023:2792](https://patchblox.com/security/data/fix/linux/rhsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16 almalinux 8 | 32:9.16.23-0.14.el8 | [ALSA-2023:2792](https://patchblox.com/security/data/fix/linux/alsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16 ol 8 | 32:9.16.23-0.14.el8 | [ELSA-2023-2792](https://patchblox.com/security/data/fix/linux/elsa-2023-2792.md) | May 24, 2023 | | Linux | bind9.16-chroot RHEL 8 | 32:9.16.23-0.14.el8 | [RHSA-2023:2792](https://patchblox.com/security/data/fix/linux/rhsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16-chroot almalinux 8 | 32:9.16.23-0.14.el8 | [ALSA-2023:2792](https://patchblox.com/security/data/fix/linux/alsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16-chroot ol 8 | 32:9.16.23-0.14.el8 | [ELSA-2023-2792](https://patchblox.com/security/data/fix/linux/elsa-2023-2792.md) | May 24, 2023 | | Linux | bind9.16-devel RHEL 8 | 32:9.16.23-0.14.el8 | [RHSA-2023:2792](https://patchblox.com/security/data/fix/linux/rhsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16-devel almalinux 8 | 32:9.16.23-0.14.el8 | [ALSA-2023:2792](https://patchblox.com/security/data/fix/linux/alsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16-devel ol 8 | 32:9.16.23-0.14.el8 | [ELSA-2023-2792](https://patchblox.com/security/data/fix/linux/elsa-2023-2792.md) | May 24, 2023 | | Linux | bind9.16-dnssec-utils RHEL 8 | 32:9.16.23-0.14.el8 | [RHSA-2023:2792](https://patchblox.com/security/data/fix/linux/rhsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16-dnssec-utils almalinux 8 | 32:9.16.23-0.14.el8 | [ALSA-2023:2792](https://patchblox.com/security/data/fix/linux/alsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16-dnssec-utils ol 8 | 32:9.16.23-0.14.el8 | [ELSA-2023-2792](https://patchblox.com/security/data/fix/linux/elsa-2023-2792.md) | May 24, 2023 | | Linux | bind9.16-doc RHEL 8 | 32:9.16.23-0.14.el8 | [RHSA-2023:2792](https://patchblox.com/security/data/fix/linux/rhsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16-doc almalinux 8 | 32:9.16.23-0.14.el8 | [ALSA-2023:2792](https://patchblox.com/security/data/fix/linux/alsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16-doc ol 8 | 32:9.16.23-0.14.el8 | [ELSA-2023-2792](https://patchblox.com/security/data/fix/linux/elsa-2023-2792.md) | May 24, 2023 | | Linux | bind9.16-libs RHEL 8 | 32:9.16.23-0.14.el8 | [RHSA-2023:2792](https://patchblox.com/security/data/fix/linux/rhsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16-libs almalinux 8 | 32:9.16.23-0.14.el8 | [ALSA-2023:2792](https://patchblox.com/security/data/fix/linux/alsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16-libs ol 8 | 32:9.16.23-0.14.el8 | [ELSA-2023-2792](https://patchblox.com/security/data/fix/linux/elsa-2023-2792.md) | May 24, 2023 | | Linux | bind9.16-license RHEL 8 | 32:9.16.23-0.14.el8 | [RHSA-2023:2792](https://patchblox.com/security/data/fix/linux/rhsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16-license almalinux 8 | 32:9.16.23-0.14.el8 | [ALSA-2023:2792](https://patchblox.com/security/data/fix/linux/alsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16-license ol 8 | 32:9.16.23-0.14.el8 | [ELSA-2023-2792](https://patchblox.com/security/data/fix/linux/elsa-2023-2792.md) | May 24, 2023 | | Linux | bind9.16-utils RHEL 8 | 32:9.16.23-0.14.el8 | [RHSA-2023:2792](https://patchblox.com/security/data/fix/linux/rhsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16-utils almalinux 8 | 32:9.16.23-0.14.el8 | [ALSA-2023:2792](https://patchblox.com/security/data/fix/linux/alsa-2023-2792.md) | May 16, 2023 | | Linux | bind9.16-utils ol 8 | 32:9.16.23-0.14.el8 | [ELSA-2023-2792](https://patchblox.com/security/data/fix/linux/elsa-2023-2792.md) | May 24, 2023 | | Linux | bind9utils Ubuntu 22.04.1 LTS (jammy) | 1:9.18.1-1ubuntu1.3 | [bind9utils 1:9.18.1-1ubuntu1.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-bind9utils-1-9.18.1-1ubuntu1.3.md) | Jan 24, 2023 | | Linux | dnsutils Ubuntu 22.04.1 LTS (jammy) | 1:9.18.1-1ubuntu1.3 | [dnsutils 1:9.18.1-1ubuntu1.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-dnsutils-1-9.18.1-1ubuntu1.3.md) | Jan 24, 2023 | | Linux | python3-bind RHEL 9 | 32:9.16.23-11.el9 | [RHSA-2023:2261](https://patchblox.com/security/data/fix/linux/rhsa-2023-2261.md) | May 9, 2023 | | Linux | python3-bind almalinux 9 | 32:9.16.23-11.el9 | [ALSA-2023:2261](https://patchblox.com/security/data/fix/linux/alsa-2023-2261.md) | May 9, 2023 | | Linux | python3-bind amzn 2023 | 32:9.16.38-1.amzn2023 | [ALAS2023-2023-161](https://patchblox.com/security/data/fix/linux/alas2023-2023-161.md) | Apr 13, 2023 | | Linux | python3-bind ol 9 | 32:9.16.23-11.el9 | [ELSA-2023-2261](https://patchblox.com/security/data/fix/linux/elsa-2023-2261.md) | May 15, 2023 | | Linux | python3-bind9.16 RHEL 8 | 32:9.16.23-0.14.el8 | [RHSA-2023:2792](https://patchblox.com/security/data/fix/linux/rhsa-2023-2792.md) | May 16, 2023 | | Linux | python3-bind9.16 almalinux 8 | 32:9.16.23-0.14.el8 | [ALSA-2023:2792](https://patchblox.com/security/data/fix/linux/alsa-2023-2792.md) | May 16, 2023 | | Linux | python3-bind9.16 ol 8 | 32:9.16.23-0.14.el8 | [ELSA-2023-2792](https://patchblox.com/security/data/fix/linux/elsa-2023-2792.md) | May 24, 2023 | --- Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.