Servers and applications

CVE-2022-0396

BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.

Severity: Medium 5.3
Published: 23 Mar 2022
Last changed: 17 Jun 2026
Added to UpHeron: 1 Nov 2026
Fixed in: 9.16.27
Sources: NVD

Affected software

Software	Affected versions
BIND 9Servers and applications · `cpe:a:isc:bind`	From 9.16.11 before 9.16.27 From 9.17.0 up to 9.18.0

References

NVD https://nvd.nist.gov/vuln/detail/CVE-2022-0396
CVE.org https://www.cve.org/CVERecord?id=CVE-2022-0396