Lucene search

K
f5F5F5:K000132267
HistoryJan 27, 2023 - 12:00 a.m.

K000132267 : BIND vulnerability CVE-2022-3736

2023-01-2700:00:00
my.f5.com
8
bind
vulnerability
cve-2022-3736
resolver
crash
rrsig query
software

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.2%

Security Advisory Description

BIND 9 resolver can crash when stale cache and stale answers are enabled, option stale-answer-client-timeout is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1. (CVE-2022-3736)

Impact

There is no impact; F5 products are not affected by this vulnerability.