CVE-2022-3736highCWE-20

named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries

33Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 49%

probabilidade de exploração

49%top 1% das CVEs

exploração observada

nãonenhuma fonte reporta

BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Produtos afetados

ISC · BIND 9

Referências

https://kb.isc.org/docs/cve-2022-3736