Servers and applications
CVE-2022-2906
An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.
- Severity
- High 7.5
- Published
- 21 Sept 2022
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 9.18.7, 9.19.5
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
BIND 9Servers and applications · cpe:a:isc:bind |
|