CVE-2022-1183

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-1183
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1183.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-1183
Downstream
Related
Published
2022-05-19T10:15:09.413Z
Modified
2026-04-10T04:42:38.566721Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS is used by both DNS over TLS (DoT) and DNS over HTTPS (DoH), but configurations using DoT alone are unaffected. Affects BIND 9.18.0 -> 9.18.2 and version 9.19.0 of the BIND 9.19 development branch.

References

Affected packages

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Introduced
8db45afa1affcb823e68afdeddedf93e136f5d3e
Last affected
3babb1557aef04ec3834d00b17013ae9fa5a434b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cab15392afd841fe3b0bacd894003376d857459a
Database specific 
{
    "versions": [
        {
            "introduced": "9.18.0"
        },
        {
            "last_affected": "9.18.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.19.0"
        }
    ]
}

Affected versions

v9.*
v9.10.0a1
v9.10.0a2
v9.10.0b1
v9.10.0b2
v9.10.0rc1
v9.11.0a1
v9.11.0a2
v9.11.0a3
v9.12.0a1
v9.12.0b1
v9.12.0b2
v9.12.0rc1
v9.13.0
v9.13.2
v9.13.3
v9.13.4
v9.13.5
v9.13.6
v9.15.0
v9.15.2
v9.15.3
v9.15.4
v9.15.7
v9.15.8
v9.18.0
v9.18.2
v9.19.0
v9.5.0a1
v9.5.0a2
v9.5.0a3
v9.5.0a4
v9.5.0a5
v9.5.0a6
v9.7.0a1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-1183.json"