A flaw was found in bind. When flooding the target resolver with special queries, an attacker can significantly impair the resolver’s performance, effectively denying legitimate clients access to the DNS resolution service.

References

bugzilla.redhat.com/show_bug.cgi?id=2128584

kb.isc.org/docs/cve-2022-2795

nvd.nist.gov/vuln/detail/CVE-2022-2795

www.cve.org/CVERecord?id=CVE-2022-2795

f5 1

openvas 49

osv 8

nvd 1

redhat 17

nessus 70

cvelist 1

ibm 7

vulnrichment 1

ubuntucve 1

almalinux 3

cbl_mariner 3

cloudlinux 1

veracode 1

debiancve 1

cve 1

oraclelinux 4

alpinelinux 1

prion 1

centos 1

ubuntu 2

rosalinux 2

suse 3

debian 2

mageia 1

fedora 6

slackware 1

photon 4

aix 1

amazon 1

cloudfoundry 1

redos 1

gentoo 1

K11742512 : BIND vulnerability CVE-2022-2795

2022-11-28 00:00:00

openvas

ISC BIND DoS Vulnerability (CVE-2022-2795) - Windows

2022-09-22 00:00:00

ISC BIND DoS Vulnerability (CVE-2022-2795) - Linux

2022-09-22 00:00:00

Huawei EulerOS: Security Advisory for bind (EulerOS-SA-2023-1653)

2023-04-27 00:00:00

osv

CVE-2022-2795

2022-09-21 11:15:09

Moderate: bind security and bug fix update

2023-05-16 00:00:00

bind9 vulnerabilities

2022-09-21 15:39:00

nvd

CVE-2022-2795

2022-09-21 11:15:09

redhat

(RHSA-2023:3002) Moderate: bind security and bug fix update

2023-05-16 06:00:27

(RHSA-2023:0402) Moderate: bind security update

2023-01-24 09:46:54

(RHSA-2023:2261) Moderate: bind security and bug fix update

2023-05-09 05:05:16

nessus

AlmaLinux 8 : bind (ALSA-2023:3002)

2023-05-20 00:00:00

F5 Networks BIG-IP : BIND vulnerability (K11742512)

2022-11-28 00:00:00

RHEL 8 : bind (RHSA-2023:3002)

2023-05-16 00:00:00

cvelist

CVE-2022-2795 Processing large delegations may severely degrade resolver performance

2022-09-21 00:00:00

ibm

Security Bulletin: Vulnerability in bind (CVE-2022-2795) affects Power HMC

2023-12-11 13:00:05

Security Bulletin: Vulnerability in bind affects IBM Integrated Analytics System [CVE-2022-2795]

2023-03-02 07:15:37

Security Bulletin: ISC BIND on IBM i is vulnerable to denial of service due to memory leaks and a flaw in resolver code (CVE-2022-2795, CVE-2022-38177, CVE-2022-38178)

2022-11-28 20:43:38

vulnrichment

CVE-2022-2795 Processing large delegations may severely degrade resolver performance

2022-09-21 00:00:00

ubuntucve

CVE-2022-2795

2022-09-21 00:00:00

almalinux

Moderate: bind security and bug fix update

2023-05-16 00:00:00

Moderate: bind security and bug fix update

2023-05-09 00:00:00

Moderate: bind9.16 security and bug fix update

2023-05-16 00:00:00

cbl_mariner

CVE-2022-2795 affecting package bind for versions less than 9.16.33-1

2022-12-09 00:19:53

CVE-2022-2795 affecting package bind 9.16.27-1

2022-11-24 00:45:37

CVE-2022-2795 affecting package dhcp for versions less than 4.4.3-2

2024-05-16 20:39:53

cloudlinux

Fixed CVE-2022-2795 in bind

2022-09-29 18:36:52

veracode

Denial Of Service (DoS)

2022-09-24 12:47:45

debiancve

CVE-2022-2795

2022-09-21 11:15:09

cve

CVE-2022-2795

2022-09-21 11:15:09

oraclelinux

bind security and bug fix update

2023-05-24 00:00:00

bind security update

2023-01-24 00:00:00

bind9.16 security and bug fix update

2023-05-24 00:00:00

alpinelinux

CVE-2022-2795

2022-09-21 11:15:09

prion

Design/Logic Flaw

2022-09-21 11:15:00

centos

bind security update

2023-01-30 16:40:47

ubuntu

Bind vulnerabilities

2022-09-21 00:00:00

Bind vulnerabilities

2022-09-21 00:00:00

rosalinux

Advisory ROSA-SA-2023-2121

2023-02-21 09:45:24

Advisory ROSA-SA-2023-2245

2023-10-17 12:03:14

suse

Security update for bind (important)

2022-10-25 00:00:00

Security update for bind (important)

2022-10-21 00:00:00

Recommended update for bind (important)

2022-10-26 00:00:00

debian

[SECURITY] [DLA 3138-1] bind9 security update

2022-10-05 15:21:42

[SECURITY] [DSA 5235-1] bind9 security update

2022-09-22 13:30:54

mageia

Updated bind packages fix security vulnerability

2022-10-24 01:48:35

fedora

[SECURITY] Fedora 36 Update: bind-9.16.33-1.fc36

2022-09-27 01:32:21

[SECURITY] Fedora 37 Update: bind-dyndb-ldap-11.10-6.fc37

2022-09-25 00:22:18

[SECURITY] Fedora 35 Update: bind-dyndb-ldap-11.9-16.fc35

2022-10-01 01:26:13

slackware

[slackware-security] bind

2022-09-21 18:42:26

photon

Important Photon OS Security Update - PHSA-2022-0251

2022-09-23 00:00:00

Important Photon OS Security Update - PHSA-2022-3.0-0458

2022-09-24 00:00:00

Important Photon OS Security Update - PHSA-2022-0523

2022-09-23 00:00:00

aix

AIX is vulnerable to denial of service due to ISC BIND

2022-12-22 10:28:36

amazon

Important: bind

2023-03-17 16:35:00

cloudfoundry

USN-5626-1: Bind vulnerabilities | Cloud Foundry

2022-10-28 00:00:00

redos

ROS-20220929-01

2022-09-29 00:00:00

gentoo

ISC BIND: Multiple Vulnerabilities

2022-10-31 00:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

0.002 Low

EPSS

Percentile

56.0%

JSON

Related for RH:CVE-2022-2795