Lucene search
Ubuntu.comUB:CVE-2022-38177HistorySep 21, 2022 - 12:00 a.m.
CVE-2022-38177
2022-09-2100:00:00
ubuntu.com
ubuntu.com
34
spoofing target resolver
malformed ecdsa signature
memory leak
named crashes
isc-dhcp vendors
bind9 libs
affects 9.8.4 - 9.16.32
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.003
Percentile
66.2%
By spoofing the target resolver with responses that have a malformed ECDSA
signature, an attacker can trigger a small memory leak. It is possible to
gradually erode available memory to the point where named crashes for lack
of resources.
Notes
| Author | Note |
|---|---|
| alexmurray | As of isc-dhcp-4.4.3-1, isc-dhcp vendors bind9 libs |
| mdeslaur | affects 9.8.4 -> 9.16.32 |
Related
redhatcve
redhatcve
CVE-2022-38177
2022-09-21 13:19:11
alpinelinux
alpinelinux
CVE-2022-38177
2022-09-21 11:15:09
prion
prion
Memory corruption
2022-09-21 11:15:00
openvas
openvas
ISC BIND DoS Vulnerability (CVE-2022-38177) - Linux
2022-09-23 00:00:00
ISC BIND DoS Vulnerability (CVE-2022-38177) - Windows
2022-09-23 00:00:00
Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2023-2404)
2023-07-25 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-38177 affecting package bind for versions less than 9.16.33-1
2022-12-09 00:19:53
CVE-2022-38177 affecting package dhcp for versions less than 4.4.3-2
2024-05-16 20:39:53
CVE-2022-38177 affecting package bind 9.16.27-1
2022-11-24 00:45:37
cvelist
cvelist
CVE-2022-38177 Memory leak in ECDSA DNSSEC verification code
2022-09-21 10:15:28
osv
osv
CVE-2022-38177
2022-09-21 11:15:09
CGA-ffh3-rpv2-whj5
2024-06-06 12:25:54
bind9 vulnerabilities
2022-09-21 15:39:00
debiancve
debiancve
CVE-2022-38177
2022-09-21 11:15:09
nessus
nessus
CBL Mariner 2.0 Security Update: bind (CVE-2022-38177)
2023-03-28 00:00:00
F5 Networks BIG-IP : BIND vulnerability (K27155546)
2022-10-20 00:00:00
cve
cve
CVE-2022-38177
2022-09-21 11:15:09
ibm
ibm
veracode
veracode
Denial Of Service (DoS)
2022-09-23 08:48:43
f5
f5
K27155546 : BIND vulnerability CVE-2022-38177
2022-10-19 00:00:00
nvd
nvd
CVE-2022-38177
2022-09-21 11:15:09
redhat
redhat
(RHSA-2022:6764) Important: bind security update
2022-10-03 14:55:52
(RHSA-2022:6778) Important: bind security update
2022-10-04 14:32:36
(RHSA-2022:6779) Important: bind security update
2022-10-04 14:33:30
almalinux
almalinux
Important: bind security update
2022-10-04 00:00:00
Important: bind security update
2022-10-03 00:00:00
Important: bind9.16 security update
2022-10-04 00:00:00
centos
centos
bind security update
2022-10-26 14:20:50
rocky
rocky
bind security update
2022-10-04 14:32:36
bind security update
2022-10-03 14:54:35
bind9.16 security update
2022-10-04 14:35:34
oraclelinux
oraclelinux
bind security update
2022-10-05 00:00:00
bind security update
2022-10-03 00:00:00
bind9.16 security update
2022-10-05 00:00:00
ubuntu
ubuntu
Bind vulnerabilities
2022-09-21 00:00:00
Bind vulnerabilities
2022-09-21 00:00:00
debian
debian
[SECURITY] [DLA 3138-1] bind9 security update
2022-10-05 15:21:42
[SECURITY] [DSA 5235-1] bind9 security update
2022-09-22 13:30:54
mageia
mageia
Updated bind packages fix security vulnerability
2022-10-24 01:48:35
suse
suse
Security update for bind (important)
2022-10-25 00:00:00
Security update for bind (important)
2022-10-21 00:00:00
Recommended update for bind (important)
2022-10-26 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: bind-9.18.7-1.fc37
2022-09-25 00:22:18
[SECURITY] Fedora 35 Update: bind-9.16.33-1.fc35
2022-10-01 01:26:12
[SECURITY] Fedora 36 Update: bind-dyndb-ldap-11.9-20.fc36
2022-09-27 01:32:21
cisa
cisa
ISC Releases Security Advisories for Multiple Versions of BIND 9
2022-09-22 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2022-0251
2022-09-23 00:00:00
Important Photon OS Security Update - PHSA-2022-4.0-0251
2022-09-23 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0458
2022-09-24 00:00:00
aix
aix
AIX is vulnerable to denial of service due to ISC BIND
2022-12-22 10:28:36
amazon
amazon
Important: bind
2023-03-17 16:35:00
slackware
slackware
[slackware-security] bind
2022-09-21 18:42:26
redos
redos
ROS-20220929-01
2022-09-29 00:00:00
cloudfoundry
cloudfoundry
USN-5626-1: Bind vulnerabilities | Cloud Foundry
2022-10-28 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2245
2023-10-17 12:03:14
gentoo
gentoo
ISC BIND: Multiple Vulnerabilities
2022-10-31 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.003
Percentile
66.2%
Related for UB:CVE-2022-38177