CVE-2022-38178

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-38178
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-38178.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-38178
Downstream
Related
Published
2022-09-21T11:15:09.733Z
Modified
2026-04-16T00:03:21.561928804Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.12:s1:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.12-s1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.14-s1:*:*:*:preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.14-s1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.19-s1:*:*:*:preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.19-s1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.21:s1:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.21-s1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.27:s1:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.27-s1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.29:s1:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.29-s1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.35:s1:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.35-s1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.37:s1:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.37-s1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.3:s4:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.3-s4"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.5:s3:*:*:*:supported_preview:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.5-s3"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.5:s3:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.5-s3"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.5:s5:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.5-s5"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.5:s6:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.5-s6"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.7-s1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.11.8:s1:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.11.8-s1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.16.11:s1:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.16.11-s1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.16.13:s1:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.16.13-s1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.16.21:s1:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.16.21-s1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.16.32:s1:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.16.32-s1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:a:isc:bind:9.16.8:s1:*:*:supported_preview:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "9.16.8-s1"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "11.0"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "35"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "36"
                }
            ],
            "source": "CPE_FIELD"
        },
        {
            "cpe": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*",
            "extracted_events": [
                {
                    "last_affected": "37"
                }
            ],
            "source": "CPE_FIELD"
        }
    ]
}
References

Affected packages

Git / gitlab.isc.org/isc-projects/bind9

Affected ranges

Type
GIT
Repo
https://gitlab.isc.org/isc-projects/bind9
Events
Introduced
4eb49c48823a2abbe0b3784305906cce5f520a4c
Last affected
3f3dd451af293119716d912c77a6da5918bf523a
Introduced
db65d701b999d10e555c13454bceb74df4494975
Last affected
12f71327ff796ed24752a4286fc0b3d9b21a4a57
Introduced
a37581543167cd471036b0d43e767c9ffb825625
Last affected
56f34392636ebe6fa38d0a687453aec2b8a593a4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
617639b7cc40ba9eb6fde2d98099726d50da812e
Last affected
eba38b89007f65bc6c1fdd2451034bbe3908b9a4
Database specific 
{
    "cpe": [
        "cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*",
        "cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "9.9.12"
        },
        {
            "last_affected": "9.9.13"
        },
        {
            "introduced": "9.10.7"
        },
        {
            "last_affected": "9.10.8"
        },
        {
            "introduced": "9.11.3"
        },
        {
            "last_affected": "9.16.32"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "9.11.3-s1"
        },
        {
            "last_affected": "9.11.6-s1"
        }
    ],
    "source": "CPE_FIELD"
}

Affected versions

v9.*
v9.10.0a1
v9.10.0a2
v9.10.0b1
v9.10.0b2
v9.10.0rc1
v9.10.0rc2
v9.10.1
v9.10.1b1
v9.10.1b2
v9.10.1rc1
v9.10.1rc2
v9.10.2
v9.10.2b1
v9.10.2rc1
v9.10.2rc2
v9.10.3
v9.10.3b1
v9.10.3rc1
v9.10.4
v9.10.4b1
v9.10.4b2
v9.10.4b3
v9.10.4rc1
v9.10.5
v9.10.5b1
v9.10.5rc1
v9.10.5rc2
v9.10.5rc3
v9.10.6b1
v9.10.6rc1
v9.10.7b1
v9.10.7rc1
v9.10.8
v9.10.8rc2
v9.11.0
v9.11.0a1
v9.11.0a2
v9.11.0a3
v9.11.0b1
v9.11.0b2
v9.11.0b3
v9.11.0rc1
v9.11.0rc2
v9.11.0rc3
v9.11.1
v9.11.1b1
v9.11.1rc1
v9.11.1rc2
v9.11.1rc3
v9.11.2b1
v9.11.2rc1
v9.11.3b1
v9.11.3rc1
v9.11.4
v9.11.4rc2
v9.11.6
v9.11.6-P1
v9.11.6rc1
v9.12.0a1
v9.12.0b1
v9.12.0b2
v9.12.0rc1
v9.13.0
v9.13.2
v9.13.3
v9.13.4
v9.13.5
v9.13.6
v9.15.0
v9.15.2
v9.15.3
v9.15.4
v9.15.7
v9.15.8
v9.16.0
v9.16.32
v9.5.0a1
v9.5.0a2
v9.5.0a3
v9.5.0a4
v9.5.0a5
v9.5.0a6
v9.7.0a1
v9.9.0
v9.9.0rc3
v9.9.0rc4
v9.9.1
v9.9.10
v9.9.10b1
v9.9.10rc1
v9.9.10rc2
v9.9.10rc3
v9.9.11b1
v9.9.11rc1
v9.9.12b1
v9.9.12rc1
v9.9.13
v9.9.13rc2
v9.9.2b1
v9.9.2rc1
v9.9.3
v9.9.3b1
v9.9.3b2
v9.9.3rc1
v9.9.3rc2
v9.9.4
v9.9.4b1
v9.9.4rc2
v9.9.5
v9.9.5b1
v9.9.5rc1
v9.9.5rc2
v9.9.6
v9.9.6b1
v9.9.6b2
v9.9.6rc1
v9.9.6rc2
v9.9.7
v9.9.7b1
v9.9.7rc1
v9.9.7rc2
v9.9.8
v9.9.8b1
v9.9.8rc1
v9.9.9
v9.9.9b1
v9.9.9b2
v9.9.9rc1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-38178.json"