Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2022-0396

DoS from specifically crafted TCP packets

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
isc

Description

BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ISC BIND

  • Open Source Branch 9.16 9.16.11 through versions before 9.16.27affected
  • Development Branch 9.17 BIND 9.17 all versionsaffected
  • Open Source Branch 9.18 9.18.0affected
  • Supported Preview Branch 9.16-S 9.16.11-S through versions before 9.16.27-Saffected

References