K44501040: BIND vulnerability CVE-2022-2906

Security Advisory Description An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service. CVE-2022-2906 Impact There is ...

OESA-2022-1983 bind security update

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Code injection

An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service...

CVE-2022-2906

CVE-2022-2906 affects ISC BIND. The provided documents describe a memory-exhaustion vulnerability that can allow a remote attacker to gradually erode available memory, potentially causing the named DNS server to crash (denial of service) under resource pressure. Several connected sources corrobor...