CVEvulnerability
CVE-2022-2906
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-09-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-401
Description
An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.
Affected configurations
• isc bind (>= 9.18.0 < 9.18.7)
• isc bind (>= 9.19.0 < 9.19.5)
Related
Weakness · CWE (1)
- CWE-401 Missing Release of Memory after Effective Lifetime weakness
References
- http://www.openwall.com/lists/oss-security/2022/09/21/3 Mailing List, Patch, Third Party Advisory
- https://kb.isc.org/docs/cve-2022-2906 Patch, Vendor Advisory
- https://security.gentoo.org/glsa/202210-25 Third Party Advisory
- http://www.openwall.com/lists/oss-security/2022/09/21/3 Mailing List, Patch, Third Party Advisory
- https://kb.isc.org/docs/cve-2022-2906 Patch, Vendor Advisory
- https://security.gentoo.org/glsa/202210-25 Third Party Advisory