UpHeron
All vulnerabilities

Servers and applications

CVE-2022-3094

Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `named` to exit due to a lack of free memory. We are not aware of any cases where this has been exploited. Memory is allocated prior to the checking of access permissions (ACLs) and is retained during the processing of a dynamic update from a client whose access credentials are…

Severity
High 7.5
Published
26 Jan 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
9.16.37, 9.18.11, 9.19.9
Sources
NVD

Affected software

SoftwareAffected versions
BIND 9Servers and applications · cpe:a:isc:bind
  • From 9.19.0 before 9.19.9
  • From 9.18.0 before 9.18.11
  • Version 9.16.36-s1
  • Version 9.16.32-s1
All 10 release lines
  • From 9.16.0 before 9.16.37
  • Version 9.16.8-s1
  • Version 9.16.11-s1
  • Version 9.16.13-s1
  • Version 9.16.14-s1
  • Version 9.16.21-s1
  • Version 9.16.32-s1
  • Version 9.16.36-s1
  • From 9.18.0 before 9.18.11
  • From 9.19.0 before 9.19.9

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-3094
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-3094