CVE-2022-3080 By sending specific queries to the resolver, an attacker can cause named to crash

Description

By sending specific queries to the resolver, an attacker can cause named to crash.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
BIND9	Versions non publiées
fedora	37	Pas de correctif indiqué
BIND 9.19	9.19.0 → < 9.19.5	9.19.5
BIND 9.18	9.18.0 → < 9.18.7	9.18.7
BIND 9.16	9.16.14 → < 9.16.33	9.16.33

Autres CVE de BIND9

Les 23 CVE de BIND9 →

CVE-2022-38178 By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small… 7.5 Élevée CVE-2022-38177 By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small… 7.5 Élevée CVE-2022-2906 An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of… 7.5 Élevée CVE-2022-2881 The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the… 5.5 Moyenne