Skip to content
OpenAdvisories
High · 7.5 CVE-2022-0667 EUVD-2022-15756GHSA-mmmq-7jwv-j64j

Assertion failure on delayed DS lookup

Published Mar 22, 2022 · Updated Sep 16, 2024 · Assigned by isc

Description

When the vulnerability is triggered the BIND process will exit. BIND 9.18.0

Affected products

VendorProductAffectedFixed
ISC BIND 9.18.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 bind9 1:9.18.1-1 —
Debian 13 bind9 1:9.18.1-1 —
Debian 12 bind9 1:9.18.1-1 —
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS bind9 1:9.18.0-2ubuntu3 —
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed bind 9.18.2-1.1 openSUSE-SU-2024:12081-1

Advisories 2

References