Skip to content
OpenAdvisories
Medium WID-SEC-2023-0207 4 CVEs

Internet Systems Consortium BIND: Mehrere Schwachstellen ermöglichen Denial of Service

Published Jan 25, 2023 · Updated Aug 6, 2026 · Revision 17 · de-DE

Vendor: amazon Vendor: Debian Vendor: IBM Vendor: Infoblox Vendor: Internet Systems Consortium Vendor: NETAPP Vendor: Oracle Vendor: Red Hat Vendor: SUSE Product: ActiveIQ Unified Manager Product: BIND Product: Enterprise Linux Product: FlashSystem Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: NIOS Product: QRadar SIEM Product: SAN Volume Controller Product: Storwize Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

BIND (Berkeley Internet Name Domain) ist ein Open-Source-Softwarepaket, das einen Domain-Name-System-Server implementiert.

Vulnerabilities 4

  • High 7.5
    CVE-2022-3094 EPSS 13%

    An UPDATE message flood may cause named to exhaust all available memory

    Sending a flood of dynamic DNS updates may cause `named` to allocate large amounts of memory. This, in turn, may cause `named` to exit due to a lack of free memory. We are not aware of any cases where this has been exploited. Memory is allocated prior to the …

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2022-3488 EPSS 19%

    named may terminate unexpectedly when processing ECS options in repeated responses to iterative queries

    Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure. 'Broken' in this context is anything that would cause the resolve…

    ISC BIND 9
  • High 7.5
    CVE-2022-3736 EPSS 48%

    named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries

    BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2022-3924 EPSS 16%

    named configured to answer from stale cache may terminate unexpectedly at recursive-clients soft quota

    This issue can affect BIND 9 resolvers with `stale-answer-enable yes;` that also make use of the option `stale-answer-client-timeout`, configured with a value greater than zero. If the resolver receives many queries that require recursion, there will be a cor…

    ISC BIND 9 bind9 bind9 Debian Ubuntu Azure Linux Alpine Wolfi

Revision history

  1. #17

    Neue Updates von SUSE aufgenommen

  2. #16

    Neue Updates von IBM aufgenommen

  3. #15

    Neue Updates von Amazon aufgenommen

  4. #14

    Neue Updates von Oracle Linux aufgenommen

  5. #13

    Neue Updates von Red Hat aufgenommen

  6. #12

    Neue Updates von IBM aufgenommen

  7. #11

    Neue Updates von Red Hat aufgenommen

  8. #10

    Neue Updates von Red Hat aufgenommen

  9. #9

    Neue Updates von Oracle Linux aufgenommen

  10. #8

    Neue Updates von Red Hat aufgenommen

  11. #7

    Neue Updates von Red Hat aufgenommen

  12. #6

    Neue Updates von NetApp aufgenommen

  13. #5

    Neue Updates von SUSE aufgenommen

  14. #4

    Neue Updates von SUSE aufgenommen

  15. #3

    Referenz(en) aufgenommen: FEDORA-2023-95D98F89A8, FEDORA-2023-A3D608DAF4

  16. #2

    Neue Updates von Debian aufgenommen

  17. #1

    Initiale Fassung

References