← voltar
CVE-2022-2906

Memory leaks in code handling Diffie-Hellman key exchange via TKEY RRs (OpenSSL 3.0.0+ only)

CVSS 7.5 HIGHEPSS 1.6%CWE-401
An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
ISC · BIND9

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →