CVE Vulnerabilities

CVE-2022-2795

Published: Sep 21, 2022 | Modified: Nov 07, 2023
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolvers performance, effectively denying legitimate clients access to the DNS resolution service.

Affected Software

Name Vendor Start Version End Version
Bind Isc 9.0.0 (including) 9.16.33 (excluding)
Bind Isc 9.18.0 (including) 9.18.7 (excluding)
Bind Isc 9.19.0 (including) 9.19.5 (excluding)
Bind Isc 9.9.3-s1 (including) 9.9.3-s1 (including)
Bind Isc 9.9.12-s1 (including) 9.9.12-s1 (including)
Bind Isc 9.9.13-s1 (including) 9.9.13-s1 (including)
Bind Isc 9.10.5-s1 (including) 9.10.5-s1 (including)
Bind Isc 9.10.7-s1 (including) 9.10.7-s1 (including)
Bind Isc 9.11.3-s1 (including) 9.11.3-s1 (including)
Bind Isc 9.11.5-s3 (including) 9.11.5-s3 (including)
Bind Isc 9.11.5-s5 (including) 9.11.5-s5 (including)
Bind Isc 9.11.5-s6 (including) 9.11.5-s6 (including)
Bind Isc 9.11.6-s1 (including) 9.11.6-s1 (including)
Bind Isc 9.11.7-s1 (including) 9.11.7-s1 (including)
Bind Isc 9.11.8-s1 (including) 9.11.8-s1 (including)
Bind Isc 9.11.12-s1 (including) 9.11.12-s1 (including)
Bind Isc 9.11.14-s1 (including) 9.11.14-s1 (including)
Bind Isc 9.11.19-s1 (including) 9.11.19-s1 (including)
Bind Isc 9.11.21-s1 (including) 9.11.21-s1 (including)
Bind Isc 9.11.27-s1 (including) 9.11.27-s1 (including)
Bind Isc 9.11.29-s1 (including) 9.11.29-s1 (including)
Bind Isc 9.11.35-s1 (including) 9.11.35-s1 (including)
Bind Isc 9.11.37-s1 (including) 9.11.37-s1 (including)
Bind Isc 9.16.8-s1 (including) 9.16.8-s1 (including)
Bind Isc 9.16.11-s1 (including) 9.16.11-s1 (including)
Bind Isc 9.16.13-s1 (including) 9.16.13-s1 (including)
Bind Isc 9.16.21-s1 (including) 9.16.21-s1 (including)
Bind Isc 9.16.32-s1 (including) 9.16.32-s1 (including)

References