CVE-2022-2795
21.09.2022, 11:15
By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.Enginsight
| Vendor | Product | Version |
|---|---|---|
| isc | bind | 9.0.0 ≤ 𝑥 < 9.16.33 |
| isc | bind | 9.18.0 ≤ 𝑥 < 9.18.7 |
| isc | bind | 9.19.0 ≤ 𝑥 < 9.19.5 |
| isc | bind | 9.9.3:s1 |
| isc | bind | 9.9.3:s1 |
| isc | bind | 9.9.12:s1 |
| isc | bind | 9.9.13:s1 |
| isc | bind | 9.10.5:s1 |
| isc | bind | 9.10.7:s1 |
| isc | bind | 9.11.3:s1 |
| isc | bind | 9.11.5:s3 |
| isc | bind | 9.11.5:s3 |
| isc | bind | 9.11.5:s5 |
| isc | bind | 9.11.5:s6 |
| isc | bind | 9.11.6:s1 |
| isc | bind | 9.11.7:s1 |
| isc | bind | 9.11.8:s1 |
| isc | bind | 9.11.12:s1 |
| isc | bind | 9.11.14-s1 |
| isc | bind | 9.11.19-s1 |
| isc | bind | 9.11.21:s1 |
| isc | bind | 9.11.27:s1 |
| isc | bind | 9.11.29:s1 |
| isc | bind | 9.11.35:s1 |
| isc | bind | 9.11.37:s1 |
| isc | bind | 9.16.8:s1 |
| isc | bind | 9.16.11:s1 |
| isc | bind | 9.16.13:s1 |
| isc | bind | 9.16.21:s1 |
| isc | bind | 9.16.32:s1 |
| debian | debian_linux | 10.0 |
| debian | debian_linux | 11.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| bind9 |
| ||||||||||||||||||
| bind9-libs |
| ||||||||||||||||||
| isc-dhcp |
|
References