Lucene search
Redhat.comRH:CVE-2022-2881HistorySep 21, 2022 - 1:19 p.m.
CVE-2022-2881
2022-09-2113:19:02
redhat.com
access.redhat.com
22
bind package
http connection
statistics channel
content length
buffer overflow
availability
8.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
0.001 Low
EPSS
Percentile
47.5%
A flaw was found in the Bind package. When an HTTP connection was reused to request statistics from the stats channel, the content length of successive responses could grow in size past the end of the allocated buffer, affecting the availability.
Related
openvas
openvas
ISC BIND DoS Vulnerability (CVE-2022-2881) - Linux
2022-09-22 00:00:00
ISC BIND DoS Vulnerability (CVE-2022-2881) - Windows
2022-09-22 00:00:00
Ubuntu: Security Advisory (USN-5626-1)
2022-09-22 00:00:00
nessus
nessus
ISC BIND 9.18.0 < 9.18.7 / 9.19.0 < 9.19.5 Vulnerability (cve-2022-2881)
2022-09-22 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Bind vulnerabilities (USN-5626-1)
2022-09-21 00:00:00
GLSA-202210-25 : ISC BIND: Multiple Vulnerabilities
2022-10-31 00:00:00
ubuntucve
ubuntucve
CVE-2022-2881
2022-09-21 00:00:00
cvelist
cvelist
CVE-2022-2881 Buffer overread in statistics channel code
2022-09-21 00:00:00
prion
prion
Buffer overflow
2022-09-21 11:15:00
cve
cve
CVE-2022-2881
2022-09-21 11:15:09
veracode
veracode
Out-Of-Bounds Read
2022-09-24 22:30:09
debiancve
debiancve
CVE-2022-2881
2022-09-21 11:15:09
alpinelinux
alpinelinux
CVE-2022-2881
2022-09-21 11:15:09
nvd
nvd
CVE-2022-2881
2022-09-21 11:15:09
osv
osv
CVE-2022-2881
2022-09-21 11:15:09
bind9 vulnerabilities
2022-09-21 11:39:24
f5
f5
K40427215 : BIND vulnerability CVE-2022-2881
2022-10-03 00:00:00
cnvd
cnvd
ISC BIND Buffer Overflow Vulnerability
2022-09-24 00:00:00
ubuntu
ubuntu
Bind vulnerabilities
2022-09-21 00:00:00
redos
redos
ROS-20220929-01
2022-09-29 00:00:00
cloudfoundry
cloudfoundry
USN-5626-1: Bind vulnerabilities | Cloud Foundry
2022-10-28 00:00:00
gentoo
gentoo
ISC BIND: Multiple Vulnerabilities
2022-10-31 00:00:00
8.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
0.001 Low
EPSS
Percentile
47.5%
Related for RH:CVE-2022-2881