Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-2906

Memory leaks in code handling Diffie-Hellman key exchange via TKEY RRs (OpenSSL 3.0.0+ only)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
isc

Description

An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ISC BIND9

  • Open Source Branch 9.18 9.18.0 through versions before 9.18.7affected
  • Development Branch 9.19 9.19.0 through versions before 9.19.5affected

References