Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2022-2795

Processing large delegations may severely degrade resolver performance

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
isc

Description

By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ISC BIND9

  • Open Source Branches 9.0 through 9.16 9.0.0 through versions before 9.16.33affected
  • Open Source Branch 9.18 9.18.0 through versions before 9.18.7affected
  • Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions up to and including 9.11.37-S1affected
  • Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.33-S1affected
  • Development Branch 9.19 9.19.0 through versions before 9.19.5affected

References