By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade bind9.16-dnssec-utilsUpgrade bind-sdbUpgrade bind9.16-utilsUpgrade bind-libsUpgrade bind9.16-docUpgrade bind9.16-chrootUpgrade bindUpgrade bind-lite-develUpgrade bind9.16-develUpgrade bind-pkcs11-develUpgrade python3-bind9.16Upgrade bind-dnssec-docUpgrade bind9.16Upgrade bind-pkcs11-libsUpgrade bind-pkcs11Upgrade bind-export-develUpgrade bind9.16-licenseUpgrade bind-utilsUpgrade bind-pkcs11-utilsUpgrade bind-sdb-chrootUpgrade bind-chrootUpgrade bind9.16-libsUpgrade bind-libs-liteUpgrade bind-licenseUpgrade bind-export-libsUpgrade bind-dnssec-utilsUpgrade bind-develUpgrade python3-bind | Oct 20, 2022 | Sep 21, 2022 |
| Alpine Linux | — | Upgrade bind | Mar 26, 2024 | Sep 21, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bind-pkcs11-utilsUpgrade bind-develUpgrade bind-licenseUpgrade bindUpgrade bind-sdb-chrootUpgrade bind-export-develUpgrade bind-libs-liteUpgrade bind-pkcs11-develUpgrade bind-export-libsUpgrade bind-sdbUpgrade bind-libsUpgrade bind-pkcs11Upgrade bind-lite-develUpgrade bind-pkcs11-libsUpgrade bind-chrootUpgrade bind-debuginfoUpgrade bind-utils | Mar 22, 2023 | Sep 21, 2022 |
| Amazon_linux_2023 | — | Upgrade bind-dlz-ldap-debuginfoUpgrade bind-dlz-filesystem-debuginfoUpgrade bind-dlz-mysql-debuginfoUpgrade bind-pkcs11-develUpgrade bind-chrootUpgrade bind-libs-debuginfoUpgrade bind-dlz-ldapUpgrade bind-dnssec-utils-debuginfoUpgrade bind-dlz-mysqlUpgrade bind-utilsUpgrade bind-utils-debuginfoUpgrade bind-dnssec-docUpgrade bind-pkcs11-debuginfoUpgrade bind-dnssec-utilsUpgrade bind-pkcs11-libsUpgrade bind-pkcs11-utils-debuginfoUpgrade bindUpgrade bind-pkcs11-utilsUpgrade python3-bindUpgrade bind-libsUpgrade bind-debuginfoUpgrade bind-dlz-sqlite3-debuginfoUpgrade bind-licenseUpgrade bind-debugsourceUpgrade bind-dlz-sqlite3Upgrade bind-dlz-filesystemUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11Upgrade bind-devel | Feb 17, 2025 | Sep 21, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 21, 2022 |
| Centos_linux | — | Upgrade bind-dnssec-utils-debuginfoUpgrade bind9.16-utilsUpgrade bind9.16-utils-debuginfoUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-develUpgrade bind9.16-chrootUpgrade bind-libsUpgrade bind-debugsourceUpgrade bindUpgrade bind-utils-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind9.16-debugsourceUpgrade bind-chrootUpgrade bind-sdbUpgrade bind-lite-develUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-develUpgrade bind-libs-liteUpgrade bind-dnssec-utilsUpgrade bind9.16-libsUpgrade bind-pkcs11-libsUpgrade bind-dnssec-docUpgrade bind-libs-debuginfoUpgrade bind9.16-libs-debuginfoUpgrade bind-pkcs11Upgrade bind-licenseUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-sdb-chrootUpgrade bind-utilsUpgrade bind-export-libsUpgrade bind-export-develUpgrade bind-sdb-debuginfoUpgrade bind-export-libs-debuginfoUpgrade bind-debuginfoUpgrade bind9.16-debuginfoUpgrade bind9.16Upgrade python3-bindUpgrade bind9.16-licenseUpgrade bind-pkcs11-utils | Oct 20, 2022 | Sep 21, 2022 |
| Debian | — | Upgrade bind9 | Oct 7, 2022 | Sep 21, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Dns Bind | — | Upgrade ISC BIND to latest version | Sep 23, 2022 | Sep 21, 2022 |
| Gentoo Linux | — | Upgrade net-dns/bind-tools.Upgrade net-dns/bind. | Oct 31, 2022 | Sep 21, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade dhcp | Dec 22, 2022 | Sep 21, 2022 |
| Huawei Euleros 2_0_sp11 | — | Upgrade dhcp | Jan 6, 2023 | Sep 21, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade bind-chrootUpgrade bind-libs-liteUpgrade bind-export-libsUpgrade bind-utilsUpgrade python3-bindUpgrade bind-export-develUpgrade bind-pkcs11-utilsUpgrade bindUpgrade bind-licenseUpgrade bind-pkcs11Upgrade bind-pkcs11-libsUpgrade bind-libs | Dec 9, 2022 | Sep 21, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade dhcp | Nov 15, 2022 | Sep 21, 2022 |
| Ibm Aix | — | Apply the fix or workaround for bind_advisory22 | Dec 23, 2022 | Sep 21, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade bind9.16-develUpgrade python3-bind9.16Upgrade bind9.16-docUpgrade python3-bindUpgrade bind-utilsUpgrade bind-export-libsUpgrade bind9.16-utilsUpgrade bind9.16-libsUpgrade bind-dnssec-utilsUpgrade bind-licenseUpgrade bind9.16-licenseUpgrade bind-pkcs11-develUpgrade bind-pkcs11-libsUpgrade bind-develUpgrade bindUpgrade bind-chrootUpgrade bind-dnssec-docUpgrade bind-libs-liteUpgrade bind-sdbUpgrade bind-export-develUpgrade bind-pkcs11Upgrade bind-sdb-chrootUpgrade bind9.16-chrootUpgrade bind9.16Upgrade bind-libsUpgrade bind-lite-develUpgrade bind-pkcs11-utilsUpgrade bind9.16-dnssec-utils | Oct 4, 2022 | Sep 21, 2022 |
| Redhat_linux | — | Upgrade bind-pkcs11-utils-debuginfoUpgrade bind9.16-dnssec-utilsUpgrade bind-licenseUpgrade bind-utils-debuginfoUpgrade bind9.16-utils-debuginfoUpgrade bind-dnssec-utils-debuginfoUpgrade python3-bindUpgrade bind-export-develUpgrade bind-pkcs11-libs-debuginfoUpgrade bind9.16-docUpgrade bind-pkcs11-libsUpgrade bind9.16-dnssec-utils-debuginfoUpgrade python3-bind9.16Upgrade bind9.16-utilsUpgrade bind-sdb-debuginfoUpgrade bind9.16-debuginfoUpgrade bind-libs-debuginfoUpgrade bind-pkcs11-develUpgrade bind9.16-licenseUpgrade bind-dnssec-utilsUpgrade bind-pkcs11Upgrade bind-export-libs-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-libsUpgrade bind9.16Upgrade bind-export-libsUpgrade bind-libs-liteUpgrade bind-debugsourceUpgrade bind-pkcs11-utilsUpgrade bind-sdb-chrootUpgrade bind9.16-libs-debuginfoUpgrade bind-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind9.16-develUpgrade bind-sdbUpgrade bindUpgrade bind-develUpgrade bind-utilsUpgrade bind-lite-develUpgrade bind9.16-debugsourceUpgrade bind-dnssec-docUpgrade bind9.16-libsUpgrade bind9.16-chrootUpgrade bind-chroot | Oct 20, 2022 | Sep 21, 2022 |
| Rocky_linux | — | Upgrade bind-pkcs11Upgrade bind9.16-libs-debuginfoUpgrade bind-libs-lite-debuginfoUpgrade bind-sdbUpgrade bind9.16-dnssec-utilsUpgrade bind-pkcs11-libs-debuginfoUpgrade bind-pkcs11-utilsUpgrade bind-debugsourceUpgrade bind9.16-utils-debuginfoUpgrade bind-export-develUpgrade bind-develUpgrade bind-libs-debuginfoUpgrade bind9.16-utilsUpgrade bind-sdb-debuginfoUpgrade bind9.16-chrootUpgrade bind-export-libs-debuginfoUpgrade bind-utils-debuginfoUpgrade bind-libsUpgrade bind9.16Upgrade bind-dnssec-utils-debuginfoUpgrade bind-debuginfoUpgrade bind-sdb-chrootUpgrade bindUpgrade bind-dnssec-utilsUpgrade bind9.16-dnssec-utils-debuginfoUpgrade bind-chrootUpgrade bind-utilsUpgrade bind9.16-debugsourceUpgrade bind-pkcs11-libsUpgrade bind9.16-debuginfoUpgrade bind9.16-libsUpgrade bind-export-libsUpgrade bind-pkcs11-utils-debuginfoUpgrade bind-pkcs11-debuginfoUpgrade bind-libs-liteUpgrade bind-pkcs11-develUpgrade bind-lite-develUpgrade bind9.16-devel | Mar 12, 2024 | Sep 21, 2022 |
| Suse | — | Upgrade libns1604Upgrade libdns1110Upgrade libbind9-1600-32bitUpgrade libbind9-161Upgrade libdns1605-32bitUpgrade libisccfg1600Upgrade libisc1606-32bitUpgrade liblwres161Upgrade libdns1605Upgrade libirs1601Upgrade libirs1601-32bitUpgrade libns1604-32bitUpgrade python-bindUpgrade python3-bindUpgrade libisc1606Upgrade libisccfg163Upgrade libisccfg1600-32bitUpgrade bindUpgrade libbind9-1600Upgrade bind-utilsUpgrade bind-develUpgrade libisccc1600-32bitUpgrade libisccc1600Upgrade bind-docUpgrade libisc1107Upgrade bind-devel-32bitUpgrade libirs161Upgrade libisc1107-32bitUpgrade libirs-develUpgrade libisccc161Upgrade bind-chrootenv | Oct 26, 2022 | Sep 21, 2022 |
| Ubuntu | — | Upgrade bind9 | Sep 22, 2022 | Sep 21, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 21, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub