5.3
Medium
CVE-2022-0396 BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition
Description
BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BIND | Versions not published |
References
- kb.isc.org kb.isc.org
- FEDORA-2022-14e36aac0c lists.fedoraproject.org
- security.netapp.com security.netapp.com
- cert-portal.siemens.com cert-portal.siemens.com
- GLSA-202210-25 security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of BIND
The 11 CVEs of BIND →
CVE-2024-4076
Client queries that trigger serving stale data and that also require lookups in local authoritative zone data may result…
7.5
High
CVE-2024-1975
If a server hosts a zone containing a "KEY" Resource Record, or a resolver DNSSEC-validates a "KEY" Resource Record from…
7.5
High
CVE-2024-1737
Resolver caches and authoritative zone databases that hold significant numbers of RRs for the same hostname (of any…
7.5
High
CVE-2024-0760
A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the…
7.5
High