Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

isc bind 9.11.37 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2022-3488
Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure. 'Broken' in this context is anything that would cause the resolver to reject...
Isc Bind 9.16.8Isc Bind 9.11.37Isc Bind 9.16.36Isc Bind 9.11.4
7.5
CVSSv3
CVE-2022-38178
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
Isc BindIsc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.11.5Isc Bind 9.11.12Isc Bind 9.11.8Isc Bind 9.11.21Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.11.27Isc Bind 9.16.13Isc Bind 9.11.29Isc Bind 9.16.21Isc Bind 9.11.35Isc Bind 9.11.14-s1Isc Bind 9.11.19-s1Isc Bind 9.11.37Isc Bind 9.16.32Debian Debian Linux 11.0Fedoraproject Fedora 35Fedoraproject Fedora 36
7.5
CVSSv3
CVE-2022-38177
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
Isc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.10.5Isc Bind 9.11.5Isc Bind 9.9.3Isc Bind 9.10.7Isc Bind 9.11.12Isc Bind 9.11.8Isc Bind 9.9.12Isc Bind 9.9.13Isc Bind 9.11.21Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.11.27Isc Bind 9.16.13Isc Bind 9.11.29Isc Bind 9.16.21Isc Bind 9.11.35Isc Bind 9.11.14-s1Isc Bind 9.11.19-s1Isc Bind 9.11.37
5.3
CVSSv3
CVE-2022-2795
By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.
Isc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.10.5Isc Bind 9.11.5Isc Bind 9.9.3Isc Bind 9.10.7Isc Bind 9.11.12Isc Bind 9.11.8Isc Bind 9.9.12Isc Bind 9.9.13Isc Bind 9.11.21Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.11.27Isc Bind 9.16.13Isc Bind 9.11.29Isc Bind 9.16.21Isc Bind 9.11.35Isc Bind 9.11.14-s1Isc Bind 9.11.19-s1Isc Bind
7.5
CVSSv3
CVE-2023-3341
The code that processes control channel messages sent to `named` calls certain functions recursively during packet parsing. Recursion depth is only limited by the maximum accepted packet size; depending on the environment, this may cause the packet-parsing code to run out of avai...
Isc Bind 9.11.7Isc Bind 9.11.3Isc Bind 9.11.6Isc Bind 9.10.5Isc Bind 9.11.5Isc Bind 9.9.3Isc Bind 9.10.7Isc Bind 9.11.12Isc Bind 9.11.8Isc Bind 9.9.12Isc Bind 9.9.13Isc Bind 9.11.21Isc Bind 9.16.8Isc Bind 9.16.11Isc Bind 9.11.27Isc Bind 9.16.13Isc Bind 9.11.29Isc Bind 9.16.21Isc Bind 9.11.35Isc Bind 9.11.37Isc Bind 9.16.32Isc Bind 9.16.14
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook