Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-38178

Memory leaks in EdDSA DNSSEC verification code

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
isc

Description

By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ISC BIND9

  • Open Source Branch 9.9 9.9.12 through versions up to and including 9.9.13affected
  • Open Source Branch 9.10 9.10.7 through versions up to and including 9.10.8affected
  • Open Source Branches 9.11 through 9.16 9.11.3 through versions before 9.16.33affected
  • Open Source Branch 9.18 9.18.0 through versions before 9.18.7affected
  • Supported Preview Branch 9.11-S 9.11.4-S1 through versions up to and including 9.11.37-S1affected
  • Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.33-S1affected
  • Development Branch 9.19 9.19.0 through versions before 9.19.5affected

References