Lucene search
PRIOn knowledge basePRION:CVE-2022-3488HistoryJan 26, 2023 - 9:15 p.m.
Design/Logic Flaw
2023-01-2621:15:00
PRIOn knowledge base
www.prio-n.com
7
bind
assertion failure
design flaw
logic flaw
ecs pseudo-options
query response
resolver
security vulnerability
0.001 Low
EPSS
Percentile
45.6%
Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure.
‘Broken’ in this context is anything that would cause the resolver to reject the query response, such as a mismatch between query and answer name.
This issue affects BIND 9 versions 9.11.4-S1 through 9.11.37-S1 and 9.16.8-S1 through 9.16.36-S1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| bind | eq | 9.16.8 s1 | |
| bind | eq | 9.11.37 s1 | |
| bind | eq | 9.16.36 s1 | |
| bind | eq | 9.11.4 s1 |
References
Related
ubuntucve
ubuntucve
CVE-2022-3488
2023-01-26 00:00:00
f5
f5
K000132690 : BIND vulnerability CVE-2022-3488
2023-02-27 00:00:00
debiancve
debiancve
CVE-2022-3488
2023-01-26 21:15:52
osv
osv
CVE-2022-3488
2023-01-26 21:15:52
openvas
openvas
ISC BIND DoS Vulnerability (CVE-2022-3488) - Windows
2023-01-26 00:00:00
ISC BIND DoS Vulnerability (CVE-2022-3488) - Linux
2023-01-26 00:00:00
nessus
nessus
nvd
nvd
CVE-2022-3488
2023-01-26 21:15:52
cve
cve
CVE-2022-3488
2023-01-26 21:15:52
cvelist
cvelist
redhatcve
redhatcve
CVE-2022-3488
2023-01-26 08:35:21
ibm
ibm
thn
thn
ISC Releases Security Patches for New BIND DNS Software Vulnerabilities
2023-01-28 07:55:00
cisa
cisa
ISC Releases Security Advisories for Multiple Versions of BIND 9
2023-01-27 00:00:00