CVE-2022-3736highCWE-20

named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries

33Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 49%

exploitation probability

49%top 1% of all CVEs

observed exploitation

nono source reports it

BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

ISC · BIND 9

References

https://kb.isc.org/docs/cve-2022-3736