CVE-2022-2795 Processing large delegations may severely degrade resolver performance

🗓️ 21 Sep 2022 10:15:25Reported by iscType

Processing large delegations flaw impacts resolver's performanc

Reporter	Title	Published	Views	Family All 269
IBM Security Bulletins	Security Bulletin: Vulnerabilities in bind and dnsmasq affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	26 Feb 202515:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	26 Mar 202503:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOps	26 Mar 202503:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in bind (CVE-2022-2795) affects Power HMC	11 Dec 202312:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in base image packages affect IBM Voice Gateway	1 Nov 202216:02	–	ibm
IBM Security Bulletins	Security Bulletin: ISC BIND on IBM i is vulnerable to denial of service due to memory leaks and a flaw in resolver code (CVE-2022-2795, CVE-2022-38177, CVE-2022-38178)	28 Nov 202220:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in bind affects IBM Integrated Analytics System [CVE-2022-2795]	2 Mar 202307:15	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to denial of service due to ISC BIND (CVE-2022-38178, CVE-2022-3080, CVE-2022-38177, CVE-2022-2795)	16 Jan 202418:36	–	ibm
Tenable Nessus	AIX 7.1 TL 5 : bind (IJ44422)	27 Dec 202200:00	–	nessus
Tenable Nessus	AIX 7.2 TL 5 : bind (IJ44425)	27 Dec 202200:00	–	nessus

[
  {
    "vendor": "ISC",
    "product": "BIND9",
    "versions": [
      {
        "version": "Open Source Branches 9.0 through 9.16 9.0.0 through versions before 9.16.33",
        "status": "affected"
      },
      {
        "version": "Open Source Branch 9.18 9.18.0 through versions before 9.18.7",
        "status": "affected"
      },
      {
        "version": "Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions up to and including 9.11.37-S1",
        "status": "affected"
      },
      {
        "version": "Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.33-S1",
        "status": "affected"
      },
      {
        "version": "Development Branch 9.19 9.19.0 through versions before 9.19.5",
        "status": "affected"
      }
    ]
  }
]

Source	Link
debian	www.debian.org/security/2022/dsa-5235
lists	www.lists.debian.org/debian-lts-announce/2022/10/msg00007.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/
security	www.security.gentoo.org/glsa/202210-25
kb	www.kb.isc.org/docs/cve-2022-2795
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/
openwall	www.openwall.com/lists/oss-security/2022/09/21/3
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/

31 Oct 2022 00:00Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.3

EPSS0.00363