The vulnerability of the BIND DNS server component, which allows a perpetrator to cause a service failure

🗓️ 07 Feb 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

The BIND DNS server memory after free vulnerability enables remote service failure.

Reporter	Title	Published	Views	Family All 151
IBM Security Bulletins	Security Bulletin: Vulnerabilities in bind and dnsmasq affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	26 Feb 202515:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	27 May 202523:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i DNS is affected by denial of service attacks due to flaws in ISC BIND (CVE-2022-3094, CVE-2022-3736, CVE-2022-3924).	13 Apr 202317:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for March 2024.	15 Apr 202502:17	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to denial of service due to ISC BIND (CVE-2022-3094, CVE-2022-3736, CVE-2022-3924)	18 Jul 202316:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in bind library (CVE-2022-3094) affects Power HMC.	10 Sep 202415:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affect IBM Robotic Process Automation for Cloud Pak.	16 Jan 202419:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in BIND affects IBM Integrated Analytics System [CVE-2022-3094]	11 Nov 202402:05	–	ibm
Tenable Nessus	Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2023-161)	20 Apr 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : bind (ALAS-2025-2729)	9 Jan 202500:00	–	nessus

Vulners

Node

internet_systems_consortium bindRange9.16.0–9.16.37

OR

internet_systems_consortium bindRange9.18.0–9.18.11

OR

internet_systems_consortium bindRange9.19.0–9.19.9

OR

red_hat red_hat_enterprise_linuxMatch7

OR

red_hat red_hat_enterprise_linuxMatch8

OR

red_hat red_hat_enterprise_linuxMatch9

Source	Link
kb	www.kb.isc.org/docs/cve-2022-3094
access	www.access.redhat.com/security/cve/CVE-2022-3094
suse	www.suse.com/security/cve/CVE-2022-3094.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-3094
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.7/
abf	www.abf.rosa.ru/advisories/ROSA-SA-2025-2791
abf	www.abf.rosa.ru/advisories/ROSA-SA-2025-2834
web	www.web.nvd.nist.gov/view/vuln/detail

19 Aug 2025 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 37.5

CVSS 27.8

EPSS0.13108

Bind DNS server memory after free remote exploit service failure