CVE-2022-3488

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-3488
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3488.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-3488
Published
2023-01-26T21:15:52.097Z
Modified
2026-08-07T11:49:26.063629914Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure.

'Broken' in this context is anything that would cause the resolver to reject the query response, such as a mismatch between query and answer name. This issue affects BIND 9 versions 9.11.4-S1 through 9.11.37-S1 and 9.16.8-S1 through 9.16.36-S1.

Database specific 
{
    "unresolved_ranges": [
        {
            "vendor_product": "isc:bind",
            "source": "CPE_STRING",
            "extracted_events": [
                {
                    "introduced": "9.11.37-s1"
                },
                {
                    "last_affected": "9.11.37-s1"
                },
                {
                    "introduced": "9.11.37-s1"
                },
                {
                    "last_affected": "9.11.37-s1"
                },
                {
                    "introduced": "9.16.8-s1"
                },
                {
                    "last_affected": "9.16.8-s1"
                },
                {
                    "introduced": "9.16.8-s1"
                },
                {
                    "last_affected": "9.16.8-s1"
                },
                {
                    "introduced": "9.16.36-s1"
                },
                {
                    "last_affected": "9.16.36-s1"
                },
                {
                    "introduced": "9.16.36-s1"
                },
                {
                    "last_affected": "9.16.36-s1"
                }
            ],
            "cpes": [
                "cpe:2.3:a:isc:bind:9.11.37:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.16.36:s1:*:*:supported_preview:*:*:*",
                "cpe:2.3:a:isc:bind:9.16.8:s1:*:*:supported_preview:*:*:*"
            ]
        }
    ]
}
References

Affected packages

Git / github.com/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://github.com/isc-projects/bind9
Events
Introduced
2b060b2cc30fd7d92b805751fa6c7f72fd000f23
Last affected
2b060b2cc30fd7d92b805751fa6c7f72fd000f23
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:isc:bind:9.11.4:s1:*:*:supported_preview:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "9.11.4-s1"
        },
        {
            "last_affected": "9.11.4-s1"
        }
    ]
}

Affected versions

9.*
9.11.4-s1
v9.*
v9.11.4-P1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3488.json"

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Introduced
2b060b2cc30fd7d92b805751fa6c7f72fd000f23
Last affected
2b060b2cc30fd7d92b805751fa6c7f72fd000f23
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:isc:bind:9.11.4:s1:*:*:supported_preview:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "9.11.4-s1"
        },
        {
            "last_affected": "9.11.4-s1"
        }
    ]
}

Affected versions

9.*
9.11.4-s1
v9.*
v9.11.4-P1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3488.json"