CVE-2022-1183
Fixed in a distro release EPSS 6%CVSS 7.5
On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS is used by both DNS over TLS (DoT) and DNS over HTTPS (DoH), but configurations using DoT alone are unaffected. Affects BIND 9.18.0 -> 9.18.2 and version 9.19.0 of the BIND 9.19 development branch.
Products: ISC BIND9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | bind | 9.18.3-1 |
| Debian 12 | bind9 | 1:9.18.3-1 |
| Debian 13 | bind9 | 1:9.18.3-1 |
| Debian 14 | bind9 | 1:9.18.3-1 |
| Ubuntu 22.04 LTS | bind9 | 1:9.18.1-1ubuntu1.1 |
| openSUSE Tumbleweed | bind | 9.18.3-1.1 |