The vulnerability of the DNS BIND server, related to the lack of use of the assert() function, allows a hacker to trigger a service failure.

🗓️ 14 Nov 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

DNS BIND vulnerability from not using assert function allows attackers to cause outages.

Reporter	Title	Published	Views	Family All 110
IBM Security Bulletins	Security Bulletin: Vulnerabilities in bind and dnsmasq affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	26 Feb 202515:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i DNS is affected by denial of service attacks due to flaws in ISC BIND (CVE-2022-3094, CVE-2022-3736, CVE-2022-3924).	13 Apr 202317:42	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to denial of service due to ISC BIND (CVE-2022-3094, CVE-2022-3736, CVE-2022-3924)	18 Jul 202316:40	–	ibm
Tenable Nessus	Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2023-161)	20 Apr 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : bind (ALSA-2023:2261)	14 May 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : bind9.16 (ALSA-2023:2792)	20 May 202300:00	–	nessus
Tenable Nessus	ISC BIND 9.16.12 < 9.16.37 / 9.16.12-S1 < 9.16.37-S1 / 9.18.0 < 9.18.11 / 9.19.0 < 9.19.9 Assertion Failure (cve-2022-3924)	26 Jan 202300:00	–	nessus
Tenable Nessus	CentOS 9 : bind-9.16.23-9.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	Debian DSA-5329-1 : bind9 - security update	27 Jan 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : bind (EulerOS-SA-2023-1754)	8 May 202300:00	–	nessus

Vulners

Node

internet_systems_consortium bindRange9.18.0–9.18.11

OR

internet_systems_consortium bindRange9.19.0–9.19.9

OR

internet_systems_consortium bindRange9.16.12–9.16.37

Source	Link
kb	www.kb.isc.org/docs/cve-2022-3924
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-3924
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-3924
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.7/
web	www.web.nvd.nist.gov/view/vuln/detail

11 Jan 2024 00:00Current

7.6High risk

Vulners AI Score7.6

CVSS 37.5

CVSS 27.8

EPSS0.17265

domain name system bind server vulnerability assert function absence remote attackers service outages