UpHeron
All vulnerabilities

Servers and applications

CVE-2022-38178

By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.

Severity
High 7.5
Published
21 Sept 2022
Last changed
1 Sept 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
BIND 9Servers and applications · cpe:a:isc:bind
  • Version 9.16.32-s1
  • Version 9.16.21-s1
  • Version 9.16.13-s1
  • Version 9.16.11-s1
All 24 release lines
  • From 9.9.12 up to 9.9.13
  • From 9.10.7 up to 9.10.8
  • From 9.11.3 up to 9.16.32
  • Version 9.11.3-s1
  • Version 9.11.3-s4
  • Version 9.11.5-s3
  • Version 9.11.5-s5
  • Version 9.11.5-s6
  • Version 9.11.6-s1
  • Version 9.11.7-s1
  • Version 9.11.8-s1
  • Version 9.11.12-s1
  • Version 9.11.14-s1
  • Version 9.11.19-s1
  • Version 9.11.21-s1
  • Version 9.11.27-s1
  • Version 9.11.29-s1
  • Version 9.11.35-s1
  • Version 9.11.37-s1
  • Version 9.16.8-s1
  • Version 9.16.11-s1
  • Version 9.16.13-s1
  • Version 9.16.21-s1
  • Version 9.16.32-s1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-38178
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-38178