Description
By sending specific queries to the resolver, an attacker can cause named to crash.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ISC BIND9
Open Source Branch 9.16 9.16.14 through versions before 9.16.33affectedOpen Source Branch 9.18 9.18.0 through versions before 9.18.7affectedSupported Preview Branch 9.16-S 9.16.14-S1 through versions before 9.16.33-S1affectedDevelopment Branch 9.19 9.19.0 through versions before 9.19.5affected
References
- https://kb.isc.org/docs/cve-2022-3080 ↗
- http://www.openwall.com/lists/oss-security/2022/09/21/3 ↗
- https://www.debian.org/security/2022/dsa-5235 ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/ ↗
- https://security.gentoo.org/glsa/202210-25 ↗
- https://security.netapp.com/advisory/ntap-20240621-0002/ ↗