CVE-2022-3736

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-3736
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-3736.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-3736
Downstream
Related
Published
2023-01-26T21:15:57Z
Modified
2025-10-25T12:15:31.649674Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

BIND 9 resolver can crash when stale cache and stale answers are enabled, option stale-answer-client-timeout is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1.

References

Affected packages

Git / github.com/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://github.com/isc-projects/bind9
Events

Affected versions

v9.*

v9.18.0
v9.18.10
v9.18.2
v9.18.3
v9.18.4
v9.18.5
v9.18.6
v9.18.7
v9.18.8
v9.18.9

Git / github.com/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events