CVE-2022-2906

Source
https://cve.org/CVERecord?id=CVE-2022-2906
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-2906.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-2906
Downstream
Related
Published
2022-09-21T11:15:09.620Z
Modified
2026-02-03T07:33:22.140901Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.

References

Affected packages

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Affected versions

v9.*
v9.18.0
v9.18.2
v9.18.3
v9.18.4
v9.18.5
v9.18.6
v9.19.0
v9.19.1
v9.19.2
v9.19.3
v9.19.4

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-2906.json"