en Se connecter

7.5 Élevée

CVE-2022-3080 By sending specific queries to the resolver, an attacker can cause named to crash

Description

By sending specific queries to the resolver, an attacker can cause named to crash.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
BIND9	Versions non publiées
fedora	37	Pas de correctif indiqué
BIND 9.19	9.19.0 → < 9.19.5	9.19.5
BIND 9.18	9.18.0 → < 9.18.7	9.18.7
BIND 9.16	9.16.14 → < 9.16.33	9.16.33

Références

kb.isc.org kb.isc.org
[oss-security] 20220921 ISC has disclosed six vulnerabilities in BIND (CVE-2022-2795, CVE-2022-2881, CVE-2022-2906, CVE-2022-3080, CVE-2022-38177, CVE-2022-38178) www.openwall.com
DSA-5235 www.debian.org
FEDORA-2022-ef038365de lists.fedoraproject.org
FEDORA-2022-8268735e06 lists.fedoraproject.org
FEDORA-2022-b197d64471 lists.fedoraproject.org
GLSA-202210-25 security.gentoo.org
security.netapp.com security.netapp.com

Chronologie

Publiée 21 septembre 2022
Dernière modification 17 septembre 2024

Les 23 CVE de BIND9 →

CVE-2022-38178 By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small… 7.5 Élevée CVE-2022-38177 By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small… 7.5 Élevée CVE-2022-2906 An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of… 7.5 Élevée CVE-2022-2881 The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the… 5.5 Moyenne

Suivre cette CVE