CVE-2022-3080 By sending specific queries to the resolver, an attacker can cause named to crash

Description

By sending specific queries to the resolver, an attacker can cause named to crash.

Affected products and versions

Product	Affected versions	Fixed in
BIND9	Versions not published
fedora	37	No fix stated
BIND 9.19	9.19.0 → < 9.19.5	9.19.5
BIND 9.18	9.18.0 → < 9.18.7	9.18.7
BIND 9.16	9.16.14 → < 9.16.33	9.16.33

Other CVEs of BIND9

The 23 CVEs of BIND9 →

CVE-2022-38178 By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small… 7.5 High CVE-2022-38177 By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small… 7.5 High CVE-2022-2906 An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of… 7.5 High CVE-2022-2881 The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the… 5.5 Medium