Описание
The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| bind9 | fixed | 1:9.18.7-1 | package | |
| bind9 | ignored | bullseye | package | |
| bind9 | not-affected | buster | package |
Примечания
https://kb.isc.org/docs/cve-2022-2881
Exposed after (but not only requirement): https://gitlab.isc.org/isc-projects/bind9/-/commit/69c1ee1ce9f801aaa082bb3abf5969b46699f70a (v9_17_4)
Fixed by: https://gitlab.isc.org/isc-projects/bind9/-/commit/13333db69f9b9710a98c86f44276e01e95420fa0 (v9_18_7)
EPSS
Связанные уязвимости
The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process.
The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process.
The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process.
The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process.
Уязвимость сервера DNS BIND, связанная с отсутствием проверки длины буфера и чтением за границами памяти, позволяющая нарушителю получить доступ к защищаемой информации или вызвать отказ в обслуживании
EPSS