libbind9.so is vulnerable to denial of service. The vulnerability exists because the DNSSEC verification code used in the library for the ECDSA algorithm leaks memory when the signature length is mismatched, allowing an attacker to cause an application crash.

References

www.openwall.com/lists/oss-security/2022/09/21/3

github.com/isc-projects/bind9/commit/cacca9bdf956231f44c1d01eef7b1390928a4ef7

kb.isc.org/docs/cve-2022-38177

lists.debian.org/debian-lts-announce/2022/10/msg00007.html

lists.fedoraproject.org/archives/list/[email protected]/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/

lists.fedoraproject.org/archives/list/[email protected]/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/

lists.fedoraproject.org/archives/list/[email protected]/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/

security.gentoo.org/glsa/202210-25

security.netapp.com/advisory/ntap-20221228-0010/

www.debian.org/security/2022/dsa-5235

www.openwall.com/lists/oss-security/2022/09/21/3

redhatcve 1

ubuntucve 1

alpinelinux 1

prion 1

openvas 49

cbl_mariner 3

cvelist 1

osv 12

nessus 74

ibm 6

debiancve 1

cve 1

f5 1

nvd 1

redhat 9

centos 1

rocky 3

oraclelinux 4

almalinux 3

ubuntu 2

suse 3

mageia 1

debian 2

fedora 6

slackware 1

cisa 1

aix 1

photon 4

amazon 1

cloudfoundry 1

redos 1

rosalinux 1

gentoo 1

redhatcve

CVE-2022-38177

2022-09-21 13:19:11

ubuntucve

CVE-2022-38177

2022-09-21 00:00:00

alpinelinux

CVE-2022-38177

2022-09-21 11:15:09

prion

Memory corruption

2022-09-21 11:15:00

openvas

ISC BIND DoS Vulnerability (CVE-2022-38177) - Linux

2022-09-23 00:00:00

ISC BIND DoS Vulnerability (CVE-2022-38177) - Windows

2022-09-23 00:00:00

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2023-1653)

2023-04-27 00:00:00

cbl_mariner

CVE-2022-38177 affecting package bind for versions less than 9.16.33-1

2022-12-09 00:19:53

CVE-2022-38177 affecting package dhcp for versions less than 4.4.3-2

2024-05-16 20:39:53

CVE-2022-38177 affecting package bind 9.16.27-1

2022-11-24 00:45:37

cvelist

CVE-2022-38177 Memory leak in ECDSA DNSSEC verification code

2022-09-21 10:15:28

osv

CVE-2022-38177

2022-09-21 11:15:09

CGA-ffh3-rpv2-whj5

2024-06-06 12:25:54

bind9 vulnerabilities

2022-09-21 15:39:00

nessus

CBL Mariner 2.0 Security Update: bind (CVE-2022-38177)

2023-03-28 00:00:00

F5 Networks BIG-IP : BIND vulnerability (K27155546)

2022-10-20 00:00:00

ISC BIND 9.9.4-S1 < 9.16.33-S1 / 9.8.4 < 9.16.33 / 9.16.8-S1 < 9.16.33-S1 Memory Exhaustion (cve-2022-38177)

2022-09-22 00:00:00

ibm

Security Bulletin: Vulnerability in bind affects IBM Integrated Analytics System [CVE-2022-38177]

2023-01-03 10:16:51

Security Bulletin: IBM Robotic Process Automation for Cloud Pak may be vulnerable to a denial of service due to ISC BIND (CVE-2022-38177, CVE-2022-38178).

2023-03-08 20:50:41

Security Bulletin: ISC BIND on IBM i is vulnerable to denial of service due to memory leaks and a flaw in resolver code (CVE-2022-2795, CVE-2022-38177, CVE-2022-38178)

2022-11-28 20:43:38

debiancve

CVE-2022-38177

2022-09-21 11:15:09

cve

CVE-2022-38177

2022-09-21 11:15:09

K27155546 : BIND vulnerability CVE-2022-38177

2022-10-19 00:00:00

nvd

CVE-2022-38177

2022-09-21 11:15:09

redhat

(RHSA-2022:6778) Important: bind security update

2022-10-04 14:32:36

(RHSA-2022:6779) Important: bind security update

2022-10-04 14:33:30

(RHSA-2022:6765) Important: bind security update

2022-10-03 14:56:52

centos

bind security update

2022-10-26 14:20:50

rocky

bind security update

2022-10-04 14:32:36

bind9.16 security update

2022-10-04 14:35:34

bind security update

2022-10-03 14:54:35

oraclelinux

bind security update

2022-10-05 00:00:00

bind security update

2022-10-03 00:00:00

bind security update

2022-10-04 00:00:00

almalinux

Important: bind security update

2022-10-04 00:00:00

Important: bind security update

2022-10-03 00:00:00

Important: bind9.16 security update

2022-10-04 00:00:00

ubuntu

Bind vulnerabilities

2022-09-21 00:00:00

Bind vulnerabilities

2022-09-21 00:00:00

suse

Security update for bind (important)

2022-10-25 00:00:00

Security update for bind (important)

2022-10-21 00:00:00

Recommended update for bind (important)

2022-10-26 00:00:00

mageia

Updated bind packages fix security vulnerability

2022-10-24 01:48:35

debian

[SECURITY] [DLA 3138-1] bind9 security update

2022-10-05 15:21:42

[SECURITY] [DSA 5235-1] bind9 security update

2022-09-22 13:30:54

fedora

[SECURITY] Fedora 37 Update: bind-dyndb-ldap-11.10-6.fc37

2022-09-25 00:22:18

[SECURITY] Fedora 36 Update: bind-9.16.33-1.fc36

2022-09-27 01:32:21

[SECURITY] Fedora 37 Update: bind-9.18.7-1.fc37

2022-09-25 00:22:18

slackware

[slackware-security] bind

2022-09-21 18:42:26

cisa

ISC Releases Security Advisories for Multiple Versions of BIND 9

2022-09-22 00:00:00

aix

AIX is vulnerable to denial of service due to ISC BIND

2022-12-22 10:28:36

photon

Important Photon OS Security Update - PHSA-2022-0251

2022-09-23 00:00:00

Important Photon OS Security Update - PHSA-2022-3.0-0458

2022-09-24 00:00:00

Important Photon OS Security Update - PHSA-2022-4.0-0251

2022-09-23 00:00:00

amazon

Important: bind

2023-03-17 16:35:00

cloudfoundry

USN-5626-1: Bind vulnerabilities | Cloud Foundry

2022-10-28 00:00:00

redos

ROS-20220929-01

2022-09-29 00:00:00

rosalinux

Advisory ROSA-SA-2023-2245

2023-10-17 12:03:14

gentoo

ISC BIND: Multiple Vulnerabilities

2022-10-31 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

EPSS

0.003

Percentile

66.2%

JSON

Related for VERACODE:37250