UpHeron
All vulnerabilities

Servers and applications

CVE-2022-2795

By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.

Severity
Medium 5.3
Published
21 Sept 2022
Last changed
1 Sept 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.16.33, 9.18.7, 9.19.5
Sources
NVD

Affected software

SoftwareAffected versions
BIND 9Servers and applications · cpe:a:isc:bind
  • From 9.19.0 before 9.19.5
  • From 9.18.0 before 9.18.7
  • Version 9.16.32-s1
  • Version 9.16.21-s1
All 28 release lines
  • From 9.0.0 before 9.16.33
  • Version 9.9.3-s1
  • Version 9.9.12-s1
  • Version 9.9.13-s1
  • Version 9.10.5-s1
  • Version 9.10.7-s1
  • Version 9.11.3-s1
  • Version 9.11.5-s3
  • Version 9.11.5-s5
  • Version 9.11.5-s6
  • Version 9.11.6-s1
  • Version 9.11.7-s1
  • Version 9.11.8-s1
  • Version 9.11.12-s1
  • Version 9.11.14-s1
  • Version 9.11.19-s1
  • Version 9.11.21-s1
  • Version 9.11.27-s1
  • Version 9.11.29-s1
  • Version 9.11.35-s1
  • Version 9.11.37-s1
  • Version 9.16.8-s1
  • Version 9.16.11-s1
  • Version 9.16.13-s1
  • Version 9.16.21-s1
  • Version 9.16.32-s1
  • From 9.18.0 before 9.18.7
  • From 9.19.0 before 9.19.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-2795
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-2795