CVE-2022-3080
BIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly
At a glance Severity HIGH 7.5 EPSS EPSS 2.02 % · percentile 81 (2026-10-27) State PUBLISHED Published 2022-09-21 Updated 2024-09-17 Assigner isc NVD status Modified Description By sending specific queries to the resolver, an attacker can cause named to crash.
Scores Version Score Vector Scored by CVSS 3.1 HIGH 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H isc CVSS 3.1 HIGH 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H NVD · security-officer@isc.org (Secondary) CVSS 3.1 HIGH 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:* ≥ 9.16.14 < 9.16.33cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:* ≥ 9.18.0 < 9.18.7cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:* ≥ 9.19.0 < 9.19.5cpe:2.3:a:isc:bind:9.16.14:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.16.21:s1:*:*:supported_preview:*:*:*cpe:2.3:a:isc:bind:9.16.32:s1:*:*:supported_preview:*:*:*cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*Affected products Product Versions ISC · BIND9 affected Open Source Branch 9.16 9.16.14 through versions before 9.16.33 ; affected Open Source Branch 9.18 9.18.0 through versions before 9.18.7 ; affected Supported Preview Branch 9.16-S 9.16.14-S1 through versions before 9.16.33-S1 ; affected Development Branch 9.19 9.19.0 through versions before 9.19.5
References
Sources
