By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind9.16Upgrade bind-dnssec-utilsUpgrade bind-develUpgrade bindUpgrade bind9.16-chrootUpgrade bind-pkcs11-utilsUpgrade bind-utilsUpgrade bind-sdb-chrootUpgrade bind-export-libsUpgrade bind-chrootUpgrade bind9.16-libsUpgrade bind9.16-develUpgrade bind-sdbUpgrade bind-pkcs11Upgrade bind-libsUpgrade bind-dnssec-docUpgrade bind-libs-liteUpgrade bind-lite-develUpgrade python3-bindUpgrade bind9.16-utilsUpgrade bind-export-develUpgrade bind9.16-licenseUpgrade bind-pkcs11-develUpgrade bind9.16-dnssec-utilsUpgrade bind-licenseUpgrade python3-bind9.16Upgrade bind-pkcs11-libsUpgrade bind9.16-doc | Oct 20, 2022 | Sep 21, 2022 |
| Alpine Linux | — | Upgrade bind | Mar 26, 2024 | Sep 21, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bind-pkcs11-libsUpgrade bind-pkcs11-utilsUpgrade bind-libs-liteUpgrade bind-licenseUpgrade bind-export-develUpgrade bind-pkcs11-develUpgrade bind-sdb-chrootUpgrade bind-libsUpgrade bind-develUpgrade bind-pkcs11Upgrade bind-debuginfoUpgrade bind-chrootUpgrade bind-export-libsUpgrade bind-sdbUpgrade bind-lite-develUpgrade bindUpgrade bind-utils | Mar 22, 2023 | Sep 21, 2022 |
| Amazon_linux_2023 | — | Upgrade bind-pkcs11-utilsUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-dlz-filesystemUpgrade bind-chrootUpgrade bindUpgrade bind-dlz-mysqlUpgrade bind-pkcs11Upgrade bind-debugsourceUpgrade bind-libsUpgrade bind-develUpgrade bind-debuginfoUpgrade bind-dlz-sqlite3Upgrade python3-bindUpgrade bind-dnssec-docUpgrade bind-licenseUpgrade bind-dlz-mysql-debuginfoUpgrade bind-utilsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-dlz-ldapUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-dlz-ldap-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11-libs | Feb 17, 2025 | Sep 21, 2022 |
| Centos_linux | — | Upgrade bind9.16-utilsUpgrade bind-pkcs11Upgrade bind9.16-libs-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-chrootUpgrade bind-sdbUpgrade bind-lite-develUpgrade bind9.16-utils-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-libsUpgrade bind-export-libs-debuginfoUpgrade bind9.16Upgrade bind-pkcs11-libsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-develUpgrade bind-utils-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-develUpgrade bind-sdb-chrootUpgrade bind-pkcs11-debuginfoUpgrade bind-export-libsUpgrade bind-export-develUpgrade bind-debugsourceUpgrade bind-libs-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-chrootUpgrade bind-utilsUpgrade bind-dnssec-docUpgrade bind-licenseUpgrade bind9.16-debuginfoUpgrade bind-pkcs11-utilsUpgrade python3-bindUpgrade bind-sdb-debuginfoUpgrade bind-debuginfoUpgrade bind9.16-licenseUpgrade bindUpgrade bind-libs-liteUpgrade bind9.16-libs | Oct 20, 2022 | Sep 21, 2022 |
| Debian | — | Upgrade bind9 | Oct 7, 2022 | Sep 21, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Sep 23, 2022 | Sep 21, 2022 |
| Gentoo Linux | — | Upgrade net-dns/bind.Upgrade net-dns/bind-tools. | Oct 31, 2022 | Sep 21, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade dhcp | Dec 22, 2022 | Sep 21, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade dhcp | Jan 6, 2023 | Sep 21, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade bindUpgrade bind-pkcs11-utilsUpgrade bind-licenseUpgrade bind-libs-liteUpgrade bind-pkcs11-libsUpgrade bind-pkcs11Upgrade bind-utilsUpgrade bind-libsUpgrade bind-chroot | Mar 9, 2023 | Sep 21, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bind-pkcs11Upgrade bind-licenseUpgrade bind-libsUpgrade bind-export-develUpgrade bindUpgrade bind-libs-liteUpgrade bind-export-libsUpgrade bind-pkcs11-utilsUpgrade python3-bindUpgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-utils | Dec 9, 2022 | Sep 21, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dhcp | Jan 9, 2023 | Sep 21, 2022 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory22 | Dec 23, 2022 | Sep 21, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade bind-licenseUpgrade bind-sdbUpgrade bindUpgrade bind-dnssec-docUpgrade bind-dnssec-utilsUpgrade bind9.16-docUpgrade bind-export-libsUpgrade bind-chrootUpgrade bind9.16-dnssec-utilsUpgrade bind9.16-utilsUpgrade bind9.16-libsUpgrade bind-export-develUpgrade python3-bind9.16Upgrade python3-bindUpgrade bind-utilsUpgrade bind-libsUpgrade bind-develUpgrade bind9.16-develUpgrade bind-pkcs11-libsUpgrade bind9.16-licenseUpgrade bind-libs-liteUpgrade bind-sdb-chrootUpgrade bind-pkcs11-develUpgrade bind9.16Upgrade bind-pkcs11-utilsUpgrade bind-lite-develUpgrade bind9.16-chrootUpgrade bind-pkcs11 | Oct 4, 2022 | Sep 21, 2022 |
| Redhat_linux | — | Upgrade bind9.16-dnssec-utilsUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-develUpgrade bind-licenseUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-sdb-chrootUpgrade bind9.16Upgrade bind9.16-utils-debuginfoUpgrade bind9.16-chrootUpgrade bind-debuginfoUpgrade python3-bind9.16Upgrade bind9.16-licenseUpgrade bind-pkcs11-libsUpgrade bind-pkcs11Upgrade bind9.16-debugsourceUpgrade bind-libsUpgrade bind-pkcs11-utilsUpgrade bind9.16-debuginfoUpgrade bindUpgrade python3-bindUpgrade bind9.16-libs-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind-utilsUpgrade bind9.16-utilsUpgrade bind-pkcs11-develUpgrade bind9.16-develUpgrade bind-lite-develUpgrade bind-libs-debuginfoUpgrade bind9.16-docUpgrade bind-export-develUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-sdbUpgrade bind-debugsourceUpgrade bind-sdb-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-export-libsUpgrade bind-chrootUpgrade bind-dnssec-utils-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-libs-liteUpgrade bind-dnssec-docUpgrade bind9.16-libs | Oct 20, 2022 | Sep 21, 2022 |
| Rocky_linux | — | Upgrade bind9.16-develUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind-libsUpgrade bind-libs-liteUpgrade bind-lite-develUpgrade bind9.16Upgrade bind9.16-libs-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind-debuginfoUpgrade bind-utilsUpgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-pkcs11-debuginfoUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-libs-lite-debuginfoUpgrade bind-sdbUpgrade bind9.16-chrootUpgrade bind9.16-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-export-develUpgrade bind-sdb-chrootUpgrade bind-utils-debuginfoUpgrade bind-pkcs11-develUpgrade bind-pkcs11Upgrade bind-sdb-debuginfoUpgrade bind9.16-utilsUpgrade bind9.16-dnssec-utilsUpgrade bind-debugsourceUpgrade bindUpgrade bind-pkcs11-utilsUpgrade bind-export-libsUpgrade bind-dnssec-utilsUpgrade bind-develUpgrade bind9.16-libsUpgrade bind-dnssec-utils-debuginfo | Mar 12, 2024 | Sep 21, 2022 |
| Suse | — | Upgrade libirs1601-32bitUpgrade bind-chrootenvUpgrade libisccc1600-32bitUpgrade libirs161Upgrade libisc1606-32bitUpgrade libisccc1600Upgrade libns1604Upgrade python-bindUpgrade bind-develUpgrade libirs-develUpgrade libisccfg1600Upgrade libisc1107Upgrade bindUpgrade bind-utilsUpgrade bind-devel-32bitUpgrade libisc1107-32bitUpgrade libbind9-161Upgrade libisccfg163Upgrade bind-docUpgrade bind-libs-32bitUpgrade libisccfg1600-32bitUpgrade libdns1605Upgrade libisccc161Upgrade bind-libsUpgrade liblwres161Upgrade python3-bindUpgrade libdns1110Upgrade libbind9-1600-32bitUpgrade libdns1605-32bitUpgrade libbind9-1600Upgrade libisc1606Upgrade libirs1601Upgrade libns1604-32bit | Oct 26, 2022 | Sep 21, 2022 |
| Ubuntu | — | Upgrade bind9Upgrade bind9 (Ubuntu Pro) | Sep 22, 2022 | Sep 21, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub