CVE-2022-0396
23.03.2022, 11:15
BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| isc | bind | 9.16.11 ≤ 𝑥 < 9.16.27 |
| isc | bind | 9.16.11 ≤ 𝑥 < 9.16.27 |
| isc | bind | 9.17.0 ≤ 𝑥 ≤ 9.18.0 |
| netapp | h300s_firmware | - |
| netapp | h500s_firmware | - |
| netapp | h700s_firmware | - |
| netapp | h300e_firmware | - |
| netapp | h500e_firmware | - |
| netapp | h700e_firmware | - |
| netapp | h410s_firmware | - |
| netapp | h410c_firmware | - |
| siemens | sinec_ins | 𝑥 < 1.0 |
| siemens | sinec_ins | 1.0 |
| siemens | sinec_ins | 1.0:sp1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| bind |
| ||||||||||||
| bind-doc |
| ||||||||||||
| bind-utils |
| ||||||||||||
| python3-bind |
|
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| bind |
| ||
| bind-chroot |
| ||
| bind-devel |
| ||
| bind-dnssec-doc |
| ||
| bind-dnssec-utils |
| ||
| bind-doc |
| ||
| bind-libs |
| ||
| bind-license |
| ||
| bind-utils |
| ||
| bind9.16 |
| ||
| bind9.16-chroot |
| ||
| bind9.16-devel |
| ||
| bind9.16-dnssec-utils |
| ||
| bind9.16-doc |
| ||
| bind9.16-libs |
| ||
| bind9.16-license |
| ||
| bind9.16-utils |
| ||
| python3-bind |
| ||
| python3-bind9.16 |
|
Common Weakness Enumeration
References