K27155546: BIND vulnerability CVE-2022-38177

🗓️ 21 Feb 2023 18:47:15Reported by f5Type

f5🔗 my.f5.com👁 49 Views

BIND vulnerability CVE-2022-38177, spoofing target resolver causes memory lea

Reporter	Title	Published	Views	Family All 274
IBM Security Bulletins	Security Bulletin: IBM Robotic Process Automation for Cloud Pak may be vulnerable to a denial of service due to ISC BIND (CVE-2022-38177, CVE-2022-38178).	8 Mar 202320:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes multiple components with known vulnerabilities	13 Feb 202313:10	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in bind affects IBM Integrated Analytics System [CVE-2022-38177]	3 Jan 202310:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	26 Mar 202503:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture includes components with multiple known vulnerabilities.	9 Nov 202218:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in base image packages affect IBM Voice Gateway	1 Nov 202216:02	–	ibm
IBM Security Bulletins	Security Bulletin: ISC BIND on IBM i is vulnerable to denial of service due to memory leaks and a flaw in resolver code (CVE-2022-2795, CVE-2022-38177, CVE-2022-38178)	28 Nov 202220:43	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to denial of service due to ISC BIND (CVE-2022-38178, CVE-2022-3080, CVE-2022-38177, CVE-2022-2795)	16 Jan 202418:36	–	ibm
Tenable Nessus	AIX 7.1 TL 5 : bind (IJ44422)	27 Dec 202200:00	–	nessus
Tenable Nessus	AIX 7.2 TL 5 : bind (IJ44425)	27 Dec 202200:00	–	nessus

08 Jan 2024 05:46Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.5

EPSS0.01164

SSVC

bind vulnerability cve-2022-38177 memory leak dns recursion