CVE-2022-2906

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-2906
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-2906.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-2906
Downstream
Related
Published
2022-09-21T11:15:09Z
Modified
2025-10-16T05:19:59.280732Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.

References

Affected packages

Git / github.com/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://github.com/isc-projects/bind9
Events
Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events

Affected versions

v9.*

v9.18.0
v9.18.2
v9.18.3
v9.18.4
v9.18.5
v9.18.6
v9.19.0
v9.19.1
v9.19.2
v9.19.3
v9.19.4