CVE-2022-2906

An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.

Score

CVSS 3.1 7.5 High

Status

Modified - security-officer@isc.org

Published

2022-09-21

Last modified

2025-05-28

Weaknesses

CWE-401

Affected products

• Bind (Isc)
• Bind9 (Isc)

References

• http://www.openwall.com/lists/oss-security/2022/09/21/3
• https://kb.isc.org/docs/cve-2022-2906
• https://security.gentoo.org/glsa/202210-25