ISC BIND 缓冲区错误漏洞

🗓️ 21 Sep 2022 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

ISC BIND buffer overflow via stats channel when reusing a web connection may read beyond the buffer and crash.

Reporter	Title	Published	Views	Family All 51
AlpineLinux	CVE-2022-2881	21 Sep 202210:15	–	alpinelinux
BDU FSTEC	The vulnerability of the DNS BIND server lies in the lack of buffer length checking and out-of-memory reading, which allows attackers to access protected information or cause service failures.	28 Sep 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of the Diffie-Hellman algorithm in the DNS BIND server allows a attacker to cause a service failure.	4 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DNSSEC implementation in BIND servers allows attackers to perform a type of “denial-of-service attack”.	6 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DNSSEC implementation on BIND servers allows attackers to perform a type of attack known as “denial-of-service attack”.	6 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DNS BIND server, related to improper management of internal resources, allows a perpetrator to carry out a DoS attack.	6 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DNS BIND server, related to insufficient validation of input data, allows attackers to execute DoS attacks.	6 Oct 202200:00	–	bdu_fstec
Tenable Nessus	ISC BIND 9.18.0 < 9.18.7 / 9.19.0 < 9.19.5 Vulnerability (cve-2022-2881)	22 Sep 202200:00	–	nessus
Tenable Nessus	GLSA-202210-25 : ISC BIND: Multiple Vulnerabilities	31 Oct 202200:00	–	nessus
Tenable Nessus	TencentOS Server 4: bind (TSSA-2024:0612)	16 Jun 202500:00	–	nessus

Source	Link
kb	www.kb.isc.org/docs/cve-2022-2881
security	www.security.gentoo.org/glsa/202210-25
openwall	www.openwall.com/lists/oss-security/2022/09/21/3
packetstormsecurity	www.packetstormsecurity.com/files/168454/Ubuntu-Security-Notice-USN-5626-1.html
cxsecurity	www.cxsecurity.com/cveshow/CVE-2022-2881/
access	www.access.redhat.com/security/cve/cve-2022-2881
vigilance	www.vigilance.fr/vulnerability/ISC-BIND-out-of-bounds-memory-reading-via-Statistics-Channel-Code-39332
packetstormsecurity	www.packetstormsecurity.com/files/169587/Gentoo-Linux-Security-Advisory-202210-25.html

24 May 2026 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.5 - 8.2

EPSS0.00686

SSVC

bind software buffer overflow stats channel web connection reuse memory read beyond crash risk