CVE-2022-3736highCWE-20

named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries

33Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.5epss 49%

probabilidad de explotación

49%top 1% de las CVE

explotación observada

noninguna fuente lo reporta

BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Productos afectados

ISC · BIND 9

Referencias

https://kb.isc.org/docs/cve-2022-3736