CVE-2022-2906
Fixed in a distro release EPSS 2%CVSS 7.5
An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.
Products: ISC BIND9
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.13 | bind | 9.16.33-r0 |
| Alpine 3.14 | bind | 9.16.33-r0 |
| Alpine 3.15 | bind | 9.16.33-r0 |
| Alpine 3.16 | bind | 9.16.33-r0 |
| Alpine 3.17 | bind | 9.18.7-r0 |
| Alpine 3.18 | bind | 9.18.7-r0 |
| Alpine 3.19 | bind | 9.18.7-r0 |
| Alpine 3.20 | bind | 9.18.7-r0 |
| Alpine 3.21 | bind | 9.18.7-r0 |
| Alpine 3.22 | bind | 9.18.7-r0 |
| Alpine 3.23 | bind | 9.18.7-r0 |
| Alpine 3.24 | bind | 9.18.7-r0 |
| Chainguard | bind | 0 |
| Chainguard | bind-dev | 0 |
| Chainguard | bind-dnssec-root | 0 |
| Chainguard | bind-dnssec-tools | 0 |
| Chainguard | bind-doc | 0 |
| Chainguard | bind-libs | 0 |
| Chainguard | bind-plugins | 0 |
| Chainguard | bind-tools | 0 |
| Debian 12 | bind9 | 1:9.18.7-1 |
| Debian 13 | bind9 | 1:9.18.7-1 |
| Debian 14 | bind9 | 1:9.18.7-1 |
| Ubuntu 18.04 LTS | bind9 | 1:9.11.3+dfsg-1ubuntu1.18 |
| Ubuntu 20.04 LTS | bind9 | 1:9.16.1-0ubuntu2.11 |
| Ubuntu 22.04 LTS | bind9 | 1:9.18.1-1ubuntu1.2 |
| Wolfi | bind | 0 |
| Wolfi | bind-dev | 0 |
| Wolfi | bind-dnssec-root | 0 |
| Wolfi | bind-dnssec-tools | 0 |
| Wolfi | bind-doc | 0 |
| Wolfi | bind-libs | 0 |
| Wolfi | bind-plugins | 0 |
| Wolfi | bind-tools | 0 |
| openSUSE Tumbleweed | bind | 9.18.7-1.1 |