{"id":"CVE-2022-3080","aliases":["ALPINE-CVE-2022-3080","ALSA-2022:6763","ALSA-2022:6781","AZL-11000","BELL-CVE-2022-3080","DEBIAN-CVE-2022-3080","DSA-5235-1","EUVD-2022-42509","GHSA-7mrh-jrcg-wc76","OESA-2022-1983","RHSA-2022:6763","RHSA-2022:6781","RLSA-2022:6763","RLSA-2022:6781","SUSE-SU-2022:3767-1","UBUNTU-CVE-2022-3080","USN-5626-1","openSUSE-SU-2024:12356-1"],"status":"published","title":"BIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly","description":"By sending specific queries to the resolver, an attacker can cause named to crash.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.02005,"percentile":0.80952,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-613","CWE-74"],"published":"2022-09-21T00:00:00Z","modified":"2026-11-03T08:03:52Z","fixes":[{"ecosystem":"Alpine:v3.13","package":"bind","fixed_in":["9.16.33-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"bind","fixed_in":["9.16.33-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"bind","fixed_in":["9.16.33-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"bind","fixed_in":["9.16.33-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"bind","fixed_in":["9.18.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"bind","fixed_in":["9.18.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"bind","fixed_in":["9.18.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"bind","fixed_in":["9.18.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"bind","fixed_in":["9.18.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"bind","fixed_in":["9.18.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"bind","fixed_in":["9.18.7-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"bind","fixed_in":["9.18.7-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"bind","fixed_in":["9.16.33-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"bind9","fixed_in":["1:9.18.7-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bind9","fixed_in":["1:9.18.7-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bind9","fixed_in":["1:9.18.7-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"bind9","fixed_in":["1:9.18.1-1ubuntu1.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.13","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.14"},{"fixed":"9.16.33-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.14"},{"fixed":"9.16.33-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.14"},{"fixed":"9.16.33-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.14"},{"fixed":"9.16.33-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.14"},{"fixed":"9.18.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.14"},{"fixed":"9.18.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.14"},{"fixed":"9.18.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.14"},{"fixed":"9.18.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.14"},{"fixed":"9.18.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.14"},{"fixed":"9.18.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.14"},{"fixed":"9.18.7-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.16.14"},{"fixed":"9.18.7-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:9","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"bind9.16-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python3-bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Azure Linux:2","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.33-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.7-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.7-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.7-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.16.33-1~deb11u1"}]}],"versions":["1:9.16.15-1","1:9.16.21-1","1:9.16.21-1+hurd.1","1:9.16.22-1~deb11u1","1:9.16.22-1~deb11u1~bpo10+1","1:9.16.27-1~deb11u1","1:9.16.27-1~deb11u1~bpo10+1"],"bundled":4},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.23-11.oe2203"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"python3-bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"bind-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-chroot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-license","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"bind9.16-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-dnssec-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-dnssec-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"bind9.16-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3-bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"32:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:9","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.16.23-1.el9_0.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"bind9.16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.16.23-0.7.el8_6.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.33-150400.5.11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.33-150400.5.11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.16.33-150400.5.11.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.1-1ubuntu1.2"}]}],"versions":["1:9.16.15-1ubuntu1","1:9.16.15-1ubuntu2","1:9.16.15-1ubuntu3","1:9.18.0-2ubuntu1","1:9.18.0-2ubuntu2","1:9.18.0-2ubuntu3","1:9.18.1-1ubuntu1","1:9.18.1-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.11.3+dfsg-1ubuntu1.18"}]}],"versions":["1:9.10.3.dfsg.P4-12.6ubuntu1","1:9.11.2.P1-1ubuntu2","1:9.11.2.P1-1ubuntu3","1:9.11.2.P1-1ubuntu4","1:9.11.2.P1-1ubuntu5","1:9.11.3+dfsg-1ubuntu1","1:9.11.3+dfsg-1ubuntu1.1","1:9.11.3+dfsg-1ubuntu1.2","1:9.11.3+dfsg-1ubuntu1.3","1:9.11.3+dfsg-1ubuntu1.5","1:9.11.3+dfsg-1ubuntu1.7","1:9.11.3+dfsg-1ubuntu1.8","1:9.11.3+dfsg-1ubuntu1.9","1:9.11.3+dfsg-1ubuntu1.10","1:9.11.3+dfsg-1ubuntu1.11","1:9.11.3+dfsg-1ubuntu1.12","1:9.11.3+dfsg-1ubuntu1.13","1:9.11.3+dfsg-1ubuntu1.14","1:9.11.3+dfsg-1ubuntu1.15","1:9.11.3+dfsg-1ubuntu1.16","1:9.11.3+dfsg-1ubuntu1.17"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.16.1-0ubuntu2.11"}]}],"versions":["1:9.11.5.P4+dfsg-5.1ubuntu2","1:9.11.5.P4+dfsg-5.1ubuntu3","1:9.11.5.P4+dfsg-5.1ubuntu4","1:9.11.5.P4+dfsg-5.1ubuntu5","1:9.11.14+dfsg-1ubuntu1","1:9.11.14+dfsg-3ubuntu1","1:9.16.0-1ubuntu3","1:9.16.0-1ubuntu4","1:9.16.0-1ubuntu5","1:9.16.1-0ubuntu1","1:9.16.1-0ubuntu2","1:9.16.1-0ubuntu2.1","1:9.16.1-0ubuntu2.2","1:9.16.1-0ubuntu2.3","1:9.16.1-0ubuntu2.4","1:9.16.1-0ubuntu2.6","1:9.16.1-0ubuntu2.7","1:9.16.1-0ubuntu2.8","1:9.16.1-0ubuntu2.9","1:9.16.1-0ubuntu2.10"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"bind9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.18.1-1ubuntu1.2"}]}],"versions":["1:9.16.15-1ubuntu1","1:9.16.15-1ubuntu2","1:9.16.15-1ubuntu3","1:9.18.0-2ubuntu1","1:9.18.0-2ubuntu2","1:9.18.0-2ubuntu3","1:9.18.1-1ubuntu1","1:9.18.1-1ubuntu1.1"],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"bind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.18.7-1.1"}]}],"bundled":5}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"isc","product":"bind"},{"vendor":"isc","product":"bind9"}],"references":[{"url":"https://kb.isc.org/docs/cve-2022-3080","tags":["x_transferred","Patch","Vendor Advisory","fix","article"]},{"url":"http://www.openwall.com/lists/oss-security/2022/09/21/3","tags":["mailing-list","x_transferred","Mailing List","Patch","Third Party Advisory","fix"]},{"url":"https://www.debian.org/security/2022/dsa-5235","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202210-25","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20240621-0002/","tags":["x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3080","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S"},{"url":"https://security.netapp.com/advisory/ntap-20240621-0002"},{"url":"https://github.com/advisories/GHSA-7mrh-jrcg-wc76"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-3080","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6763","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3080","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38177","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38178","tags":["report"]},{"url":"https://bugzilla.redhat.com/2128600","tags":["report"]},{"url":"https://bugzilla.redhat.com/2128601","tags":["report"]},{"url":"https://bugzilla.redhat.com/2128602","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-6763.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6781","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-6781.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2022-3080","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-3080","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1983","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38177","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38178","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2795","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2881","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2906","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128602","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6763.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3080","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38177","tags":["advisory"]},{"url":"https://kb.isc.org/docs/cve-2022-38177","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38178","tags":["advisory"]},{"url":"https://kb.isc.org/docs/cve-2022-38178","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6781.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:6763","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:6781","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223767-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1201689","tags":["report"]},{"url":"https://bugzilla.suse.com/1203250","tags":["report"]},{"url":"https://bugzilla.suse.com/1203614","tags":["report"]},{"url":"https://bugzilla.suse.com/1203618","tags":["report"]},{"url":"https://bugzilla.suse.com/1203619","tags":["report"]},{"url":"https://bugzilla.suse.com/1203620","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3080","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-38178","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-3080","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5626-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-2795","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2881","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2906","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38177","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-38178","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2906","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-3080","title":"BIND 9 resolvers configured to answer from stale cache with zero stale-answer-client-timeout may terminate unexpectedly","description":"By sending specific queries to the resolver, an attacker can cause named to crash.","status":"published","published":"2022-09-21T10:15:29.861Z","modified":"2024-09-17T01:56:40.44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-613"],"updated_at":"2026-11-02T14:34:32.843656Z"}],"euvd":[{"id":"EUVD-2022-42509","description":"By sending specific queries to the resolver, an attacker can cause named to crash.","status":"published","published":"2022-09-21T10:15:29Z","modified":"2024-09-17T01:56:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:44.789987Z"}],"ghsa":[{"id":"GHSA-7mrh-jrcg-wc76","title":"By sending specific queries to the resolver, an attacker can cause named to crash.","description":"By sending specific queries to the resolver, an attacker can cause named to crash.","status":"published","published":"2022-09-22T00:00:32Z","modified":"2024-07-03T18:32:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-74","CWE-613"],"updated_at":"2026-11-02T14:57:33.79017Z"}],"nvd":[{"id":"CVE-2022-3080","description":"By sending specific queries to the resolver, an attacker can cause named to crash.","status":"published","published":"2022-09-21T11:15:09.787Z","modified":"2026-06-17T04:58:47.253Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-613"],"updated_at":"2026-11-02T14:07:28.501364Z"}],"osv":[{"id":"ALPINE-CVE-2022-3080","description":"By sending specific queries to the resolver, an attacker can cause named to crash.","status":"published","published":"2022-09-21T11:15:09.787Z","modified":"2026-11-03T07:18:33.419585854Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"AZL-11000","title":"CVE-2022-3080 affecting package bind for versions less than 9.16.33-1","description":"By sending specific queries to the resolver, an attacker can cause named to crash.","status":"published","published":"2022-09-21T11:15:09Z","modified":"2026-04-21T04:21:44.493031Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:02.044071Z"},{"id":"BELL-CVE-2022-3080","title":"CVE-2022-3080 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:28.768546Z","modified":"2026-01-26T09:45:56.493276Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.151188Z"},{"id":"CVE-2022-3080","description":"By sending specific queries to the resolver, an attacker can cause named to crash.","status":"published","published":"2022-09-21T11:15:09.787Z","modified":"2026-10-24T10:31:02.572598604Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:25.516981Z"},{"id":"DEBIAN-CVE-2022-3080","description":"By sending specific queries to the resolver, an attacker can cause named to crash.","status":"published","published":"2022-09-21T11:15:09.787Z","modified":"2026-11-03T08:03:52.194959446Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:23:57.167851Z"},{"id":"OESA-2022-1983","title":"bind security update","description":"BIND (Berkeley Internet Name Domain) is an implementation of the DNS (Domain Name System) protocols. BIND includes a DNS server (named), which resolves host names to IP addresses; a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating properly.\r\n\r\nSecurity Fix(es):\r\n\r\nBy sending specific queries to the resolver, an attacker can cause named to crash.(CVE-2022-3080)\r\n\r\nBy spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.(CVE-2022-38177)\r\n\r\nBy spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.(CVE-2022-38178)\r\n\r\nBy flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver\u0026apos;s performance, effectively denying legitimate clients access to the DNS resolution service.(CVE-2022-2795)\r\n\r\nThe underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process.(CVE-2022-2881)\r\n\r\nAn attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.(CVE-2022-2906)","status":"published","published":"2022-10-14T11:05:17Z","modified":"2026-08-18T01:17:19.978004175Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:6763","title":"Red Hat Security Advisory: bind security update","status":"published","published":"2024-09-16T09:08:10Z","modified":"2026-06-26T12:22:18.364874965Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:6781","title":"Red Hat Security Advisory: bind9.16 security update","status":"published","published":"2024-09-16T09:08:19Z","modified":"2026-06-26T12:22:06.055799198Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:6763","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: BIND 9 resolvers configured to answer from cache with zero stale-answer-timeout may terminate unexpectedly (CVE-2022-3080)\n\n* bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177)\n\n* bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-10-03T14:54:35Z","modified":"2026-02-04T16:00:09.833929Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:6781","title":"Important: bind9.16 security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: BIND 9 resolvers configured to answer from cache with zero stale-answer-timeout may terminate unexpectedly (CVE-2022-3080)\n\n* bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177)\n\n* bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-10-04T14:35:34Z","modified":"2026-02-04T07:46:28.39327Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-3080","description":"By sending specific queries to the resolver, an attacker can cause named to crash.","status":"published","published":"2022-09-21T00:00:00Z","modified":"2026-04-22T13:22:25.89712Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"ALSA-2022:6763","title":"Important: bind security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: BIND 9 resolvers configured to answer from cache with zero stale-answer-timeout may terminate unexpectedly (CVE-2022-3080)\n* bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177)\n* bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-10-03T00:00:00Z","modified":"2026-10-29T11:31:13.382759225Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:6781","title":"Important: bind9.16 security update","description":"The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly.\n\nSecurity Fix(es):\n\n* bind: BIND 9 resolvers configured to answer from cache with zero stale-answer-timeout may terminate unexpectedly (CVE-2022-3080)\n* bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177)\n* bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-10-04T00:00:00Z","modified":"2026-10-29T11:01:20.270021784Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"DSA-5235-1","title":"bind9 - security update","status":"published","published":"2022-09-22T00:00:00Z","modified":"2026-03-09T02:09:55.995752Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"openSUSE-SU-2024:12356-1","title":"bind-9.18.7-1.1 on GA media","description":"These are all security issues fixed in the bind-9.18.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:17:23.790612Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2022:3767-1","title":"Recommended update for bind","description":"This update for bind fixes the following issues:\n\nUpdate to release 9.16.33:\n\n- CVE-2022-2795: Fixed potential performance degredation due to missing database lookup limits when processing large delegations (bsc#1203614).\n- CVE-2022-3080: Fixed assertion failure when there was a stale CNAME in the cache for the incoming query and the stale-answer-client-timeout option is set to 0 (bsc#1203618).\n- CVE-2022-38177: Fixed a memory leak that could be externally triggered in the DNSSEC verification code for the ECDSA algorithm (bsc#1203619).\n- CVE-2022-38178: Fixed memory leaks that could be externally triggered in the DNSSEC verification code for the EdDSA algorithm (bsc#1203620).\n\n- Add systemd drop-in directory for named service (bsc#1201689).\n- Add modified createNamedConfInclude script and README-bind.chrootenv (bsc#1203250).\n\n- Feature Changes:\n  - Response Rate Limiting (RRL) code now treats all QNAMEs that are\n  subject to wildcard processing within a given zone as the same\n  name, to prevent circumventing the limits enforced by RRL.\n\n  - Zones using dnssec-policy now require dynamic DNS or\n  inline-signing to be configured explicitly.\n\n  - A backward-compatible approach was implemented for encoding\n  internationalized domain names (IDN) in dig and converting the\n  domain to IDNA2008 form; if that fails,\n  BIND tries an IDNA2003 conversion.\n\n  - The DNSSEC algorithms RSASHA1 and NSEC3RSASHA1 are now automatically\n  disabled on systems where they are disallowed by the security policy.\n  Primary zones using those algorithms need to be migrated to new algorithms\n  prior to running on these systems, as graceful migration to different DNSSEC\n  algorithms is not possible when RSASHA1 is disallowed by the operating system.\n\n  - Log messages related to fetch limiting have been improved to provide\n  more complete information. Specifically, the final counts of allowed\n  and spilled fetches are now logged before the counter object is destroyed.\n\n  - Non-dynamic zones that inherit dnssec-policy from the view or options\n  blocks were not marked as inline-signed and therefore never scheduled\n  to be re-signed. This has been fixed.\n\n  - The old max-zone-ttl zone option was meant to be superseded by\n  the max-zone-ttl option in dnssec-policy; however, the latter option\n  was not fully effective. This has been corrected: zones no longer load\n  if they contain TTLs greater than the limit configured in dnssec-policy.\n  For zones with both the old max-zone-ttl option and dnssec-policy\n  configured, the old option is ignored, and a warning is generated.\n\n  - rndc dumpdb -expired was fixed to include expired RRsets,\n  even if stale-cache-enable is set to no and the cache-cleaning time \n  window has passed. (jsc#SLE-24600)\n","status":"published","published":"2022-10-26T09:49:55Z","modified":"2026-02-04T02:23:17.269871Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"USN-5626-1","title":"bind9 vulnerabilities","description":"Yehuda Afek, Anat Bremler-Barr, and Shani Stajnrod discovered that Bind\nincorrectly handled large delegations. A remote attacker could possibly use\nthis issue to reduce performance, leading to a denial of service.\n(CVE-2022-2795)\n\nIt was discovered that Bind incorrectly handled statistics requests. A\nremote attacker could possibly use this issue to obtain sensitive memory\ncontents, or cause a denial of service. This issue only affected Ubuntu\n22.04 LTS. (CVE-2022-2881)\n\nIt was discovered that Bind incorrectly handled memory when processing\ncertain Diffie-Hellman key exchanges. A remote attacker could use this\nissue to consume resources, leading to a denial of service. This issue only\naffected Ubuntu 22.04 LTS. (CVE-2022-2906)\n\nMaksym Odinintsev discovered that Bind incorrectly handled answers from\ncache when configured with a zero stale-answer-timeout. A remote attacker\ncould possibly use this issue to cause Bind to crash, resulting in a denial\nof service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-3080)\n\nIt was discovered that Bind incorrectly handled memory when processing\nECDSA DNSSEC verification. A remote attacker could use this issue to\nconsume resources, leading to a denial of service. This issue only affected\nUbuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2022-38177)\n\nIt was discovered that Bind incorrectly handled memory when processing\nEDDSA DNSSEC verification. A remote attacker could use this issue to\nconsume resources, leading to a denial of service. (CVE-2022-38178)\n","status":"published","published":"2022-09-21T11:39:24Z","modified":"2026-04-27T16:32:21.270572139Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}