{"id":"CVE-2022-0396","aliases":["ALPINE-CVE-2022-0396","ALSA-2022:7643","ALSA-2022:8068","AZL-9119","BELL-CVE-2022-0396","DEBIAN-CVE-2022-0396","EUVD-2022-15542","GHSA-wqqg-j8m9-9rcc","OESA-2022-1615","RHSA-2022:7643","RHSA-2022:8068","RLSA-2022:7643","RLSA-2022:8068","SUSE-SU-2022:2713-1","UBUNTU-CVE-2022-0396","USN-5332-1","openSUSE-SU-2024:12081-1"],"status":"published","title":"DoS from specifically crafted TCP packets","description":"BIND 9.16.11 -\u003e 9.16.26, 9.17.0 -\u003e 9.18.0 and versions 9.16.11-S1 -\u003e 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.02681,"percentile":0.85917,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-404"],"published":"2022-03-16T00:00:00Z","modified":"2026-11-03T08:01:44Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"bind","fixed_in":["9.16.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"bind","fixed_in":["9.16.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"bind","fixed_in":["9.16.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"bind","fixed_in":["9.16.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"bind","fixed_in":["9.16.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"bind","fixed_in":["9.16.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"bind","fixed_in":["9.16.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"bind","fixed_in":["9.16.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"bind","fixed_in":["9.16.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"bind","fixed_in":["9.16.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"bind","fixed_in":["9.16.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"bind","fixed_in":["9.16.27-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"bind","fixed_in":["9.16.27-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"bind","fixed_in":["9.16.29-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"bind9","fixed_in":["1:9.18.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bind9","fixed_in":["1:9.18.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bind9","fixed_in":["1:9.18.1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"bind9","fixed_in":["1:9.18.0-2ubuntu3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.11"},{"fixed":"9.16.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.11"},{"fixed":"9.16.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.11"},{"fixed":"9.16.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.11"},{"fixed":"9.16.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.11"},{"fixed":"9.16.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.11"},{"fixed":"9.16.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.11"},{"fixed":"9.16.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.11"},{"fixed":"9.16.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.11"},{"fixed":"9.16.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.11"},{"fixed":"9.16.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.11"},{"fixed":"9.16.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.11"},{"fixed":"9.16.27-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.11"},{"fixed":"9.16.27-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.29-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.1-1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.23-8.oe2203"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3-bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.16.23-0.9.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.16.23-5.el9_1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.31-150400.5.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.31-150400.5.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.31-150400.5.6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.0-2ubuntu3"}]}],"versions":["1:9.16.15-1ubuntu1","1:9.16.15-1ubuntu2","1:9.16.15-1ubuntu3","1:9.18.0-2ubuntu1","1:9.18.0-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.17"}]}],"versions":["1:9.10.3.dfsg.P4-12.6ubuntu1","1:9.11.2.P1-1ubuntu2","1:9.11.2.P1-1ubuntu3","1:9.11.2.P1-1ubuntu4","1:9.11.2.P1-1ubuntu5","1:9.11.3+dfsg-1ubuntu1","1:9.11.3+dfsg-1ubuntu1.1","1:9.11.3+dfsg-1ubuntu1.2","1:9.11.3+dfsg-1ubuntu1.3","1:9.11.3+dfsg-1ubuntu1.5","1:9.11.3+dfsg-1ubuntu1.7","1:9.11.3+dfsg-1ubuntu1.8","1:9.11.3+dfsg-1ubuntu1.9","1:9.11.3+dfsg-1ubuntu1.10","1:9.11.3+dfsg-1ubuntu1.11","1:9.11.3+dfsg-1ubuntu1.12","1:9.11.3+dfsg-1ubuntu1.13","1:9.11.3+dfsg-1ubuntu1.14","1:9.11.3+dfsg-1ubuntu1.15","1:9.11.3+dfsg-1ubuntu1.16"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.16.1-0ubuntu2.10"}]}],"versions":["1:9.11.5.P4+dfsg-5.1ubuntu2","1:9.11.5.P4+dfsg-5.1ubuntu3","1:9.11.5.P4+dfsg-5.1ubuntu4","1:9.11.5.P4+dfsg-5.1ubuntu5","1:9.11.14+dfsg-1ubuntu1","1:9.11.14+dfsg-3ubuntu1","1:9.16.0-1ubuntu3","1:9.16.0-1ubuntu4","1:9.16.0-1ubuntu5","1:9.16.1-0ubuntu1","1:9.16.1-0ubuntu2","1:9.16.1-0ubuntu2.1","1:9.16.1-0ubuntu2.2","1:9.16.1-0ubuntu2.3","1:9.16.1-0ubuntu2.4","1:9.16.1-0ubuntu2.6","1:9.16.1-0ubuntu2.7","1:9.16.1-0ubuntu2.8","1:9.16.1-0ubuntu2.9"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.2-1.1"}]}],"bundled":4}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"isc","product":"bind"},{"vendor":"netapp","product":"h300e_firmware"},{"vendor":"netapp","product":"h300s_firmware"},{"vendor":"netapp","product":"h410c_firmware"},{"vendor":"netapp","product":"h410s_firmware"},{"vendor":"netapp","product":"h500e_firmware"},{"vendor":"netapp","product":"h500s_firmware"},{"vendor":"netapp","product":"h700e_firmware"},{"vendor":"netapp","product":"h700s_firmware"},{"vendor":"siemens","product":"sinec_ins"}],"references":[{"url":"https://kb.isc.org/v1/docs/cve-2022-0396","tags":["x_transferred","Mitigation","Vendor Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYD7US4HZRFUGAJ66ZTHFBYVP5N3OQBY/","tags":["vendor-advisory","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220408-0001/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://security.gentoo.org/glsa/202210-25","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0396","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NYD7US4HZRFUGAJ66ZTHFBYVP5N3OQBY/"},{"url":"https://github.com/advisories/GHSA-wqqg-j8m9-9rcc"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-0396","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7643","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-25220","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0396","tags":["report"]},{"url":"https://bugzilla.redhat.com/2064512","tags":["report"]},{"url":"https://bugzilla.redhat.com/2064513","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7643.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8068","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-8068.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-0396","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-0396","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1615","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-25220","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064513","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128601","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7643.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-25220","tags":["advisory"]},{"url":"https://kb.isc.org/docs/CVE-2021-25220","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0396","tags":["advisory","report"]},{"url":"https://kb.isc.org/docs/cve-2022-0396","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104863","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8068.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7643","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:8068","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222713-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1192146","tags":["report"]},{"url":"https://bugzilla.suse.com/1197135","tags":["report"]},{"url":"https://bugzilla.suse.com/1197136","tags":["report"]},{"url":"https://bugzilla.suse.com/1199044","tags":["report"]},{"url":"https://bugzilla.suse.com/1200685","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25219","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0396","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-0396","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5332-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-25220","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0635","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0667","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-0396","title":"DoS from specifically crafted TCP packets","description":"BIND 9.16.11 -\u003e 9.16.26, 9.17.0 -\u003e 9.18.0 and versions 9.16.11-S1 -\u003e 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.","status":"published","published":"2022-03-23T10:45:13.589Z","modified":"2024-09-16T19:05:24.544Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:34:41.69911Z"}],"euvd":[{"id":"EUVD-2022-15542","description":"BIND 9.16.11 -\u003e 9.16.26, 9.17.0 -\u003e 9.18.0 and versions 9.16.11-S1 -\u003e 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.","status":"published","published":"2022-03-23T10:45:13Z","modified":"2024-09-16T19:05:24Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T00:55:26.31684Z"}],"ghsa":[{"id":"GHSA-wqqg-j8m9-9rcc","title":"BIND 9.16.11 -\u003e 9.16.26, 9.17.0 -\u003e 9.18.0 and versions 9.16.11-S1 -\u003e 9.16.26-S1 of the BIND...","description":"BIND 9.16.11 -\u003e 9.16.26, 9.17.0 -\u003e 9.18.0 and versions 9.16.11-S1 -\u003e 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.","status":"published","published":"2022-03-24T00:00:22Z","modified":"2023-11-18T05:03:39Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:55:03.903531Z"}],"nvd":[{"id":"CVE-2022-0396","description":"BIND 9.16.11 -\u003e 9.16.26, 9.17.0 -\u003e 9.18.0 and versions 9.16.11-S1 -\u003e 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.","status":"published","published":"2022-03-23T11:15:08.38Z","modified":"2026-06-17T04:20:31.663Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-404"],"updated_at":"2026-11-02T14:07:14.24948Z"}],"osv":[{"id":"ALPINE-CVE-2022-0396","description":"BIND 9.16.11 -\u003e 9.16.26, 9.17.0 -\u003e 9.18.0 and versions 9.16.11-S1 -\u003e 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.","status":"published","published":"2022-03-23T11:15:08.38Z","modified":"2026-11-03T07:18:32.990790412Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-9119","title":"CVE-2022-0396 affecting package bind for versions less than 9.16.29-1","description":"BIND 9.16.11 -\u003e 9.16.26, 9.17.0 -\u003e 9.18.0 and versions 9.16.11-S1 -\u003e 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.","status":"published","published":"2022-03-23T11:15:08Z","modified":"2026-04-21T04:34:58.809446Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:11.397546Z"},{"id":"BELL-CVE-2022-0396","title":"CVE-2022-0396 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:41.371447Z","modified":"2026-01-26T09:46:41.174366Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:16.5265Z"},{"id":"CVE-2022-0396","description":"BIND 9.16.11 -\u003e 9.16.26, 9.17.0 -\u003e 9.18.0 and versions 9.16.11-S1 -\u003e 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.","status":"published","published":"2022-03-23T11:15:08.38Z","modified":"2026-10-24T10:30:57.196895037Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:22.824781Z"},{"id":"DEBIAN-CVE-2022-0396","description":"BIND 9.16.11 -\u003e 9.16.26, 9.17.0 -\u003e 9.18.0 and versions 9.16.11-S1 -\u003e 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.","status":"published","published":"2022-03-23T11:15:08.38Z","modified":"2026-11-03T08:01:44.067089474Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"OESA-2022-1615","title":"bind security update","description":"BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.\r\n\r\nSecurity Fix(es):\r\n\r\nBIND 9.11.0 -\u0026gt; 9.11.36 9.12.0 -\u0026gt; 9.16.26 9.17.0 -\u0026gt; 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -\u0026gt; 9.11.36-S1 9.16.8-S1 -\u0026gt; 9.16.26-S1 Versions of BIND 9 earlier than those shown - back to 9.1.0, including Supported Preview Editions - are also believed to be affected but have not been tested as they are EOL. The cache could become poisoned with incorrect records leading to queries being made to the wrong servers, which might also result in false information being returned to clients.(CVE-2021-25220)\n\n\nBIND 9.16.11 -\u003e 9.16.26, 9.17.0 -\u003e 9.18.0 and versions 9.16.11-S1 -\u003e 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.(CVE-2022-0396)","status":"published","published":"2022-04-16T11:04:53Z","modified":"2026-08-18T01:16:27.728945996Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:7643","title":"Red Hat Security Advisory: bind9.16 security update","status":"published","published":"2024-09-16T08:01:42Z","modified":"2026-08-07T10:07:17Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8068","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2024-09-16T08:01:59Z","modified":"2026-08-07T10:07:23Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:7643","title":"Important: bind9.16 security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)\n\n* bind: DoS from specifically crafted TCP packets (CVE-2022-0396)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:25:20Z","modified":"2026-02-04T20:00:07.132133Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:8068","title":"Moderate: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)\n\n* bind: DoS from specifically crafted TCP packets (CVE-2022-0396)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:14:59Z","modified":"2026-02-05T10:15:03.781645Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-0396","description":"BIND 9.16.11 -\u003e 9.16.26, 9.17.0 -\u003e 9.18.0 and versions 9.16.11-S1 -\u003e 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.","status":"published","published":"2022-03-16T00:00:00Z","modified":"2026-04-22T13:11:51.159477Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"ALSA-2022:7643","title":"Important: bind9.16 security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)\n* bind: DoS from specifically crafted TCP packets (CVE-2022-0396)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-10-29T11:01:19.215569514Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:8068","title":"Moderate: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: DNS forwarders - cache poisoning vulnerability (CVE-2021-25220)\n* bind: DoS from specifically crafted TCP packets (CVE-2022-0396)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:20.53479506Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"openSUSE-SU-2024:12081-1","title":"bind-9.18.2-1.1 on GA media","description":"These are all security issues fixed in the bind-9.18.2-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:31:28.002374Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:2713-1","title":"Security update for bind","description":"This update for bind fixes the following issues:\n\n- CVE-2021-25219: Fixed flaw that allowed abusing lame cache to severely degrade resolver performance (bsc#1192146).\n- CVE-2021-25220: Fixed potentially incorrect answers by cached forwarders (bsc#1197135).\n- CVE-2022-0396: Fixed a incorrect handling of TCP connection slots time frame  leading to deny of service (bsc#1197136).\n\nThe following non-security bugs were fixed:\n\n- Update to release 9.16.31 (jsc#SLE-24600). \n- Logrotation broken since dropping chroot (bsc#1200685).\n- A non-existent initialization script (eg a leftorver\n  'createNamedConfInclude' in /etc/sysconfig/named) may cause named\n  not to start. A warning message is printed in named.prep and\n  the fact is ignored.\n  Also, the return value of a failed script was not handled properly\n  causing a failed script to not prevent named to start. This\n  is now fixed properly.\n  [bsc#1199044, vendor-files.tar.bz2]\n","status":"published","published":"2022-08-09T10:38:14Z","modified":"2026-02-04T04:18:09.23641Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5332-1","title":"bind9 vulnerabilities","description":"Xiang Li, Baojun Liu, Chaoyi Lu, and Changgen Zou discovered that Bind\nincorrectly handled certain bogus NS records when using forwarders. A\nremote attacker could possibly use this issue to manipulate cache results.\n(CVE-2021-25220)\n\nIt was discovered that Bind incorrectly handled certain crafted TCP\nstreams. A remote attacker could possibly use this issue to cause Bind to\nconsume resources, leading to a denial of service. This issue only affected\nUbuntu 21.10. (CVE-2022-0396)\n","status":"published","published":"2022-03-17T11:19:29Z","modified":"2026-04-22T10:22:06.898854Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}