CVE-2022-3080

Опубликовано: 21 сент. 2022

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

By sending specific queries to the resolver, an attacker can cause named to crash.

Ссылки

http://www.openwall.com/lists/oss-security/2022/09/21/3
Mailing List
Patch
Third Party Advisory
https://kb.isc.org/docs/cve-2022-3080
Patch
Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/
https://security.gentoo.org/glsa/202210-25
Third Party Advisory
https://security.netapp.com/advisory/ntap-20240621-0002/
https://www.debian.org/security/2022/dsa-5235
Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/09/21/3
Mailing List
Patch
Third Party Advisory
https://kb.isc.org/docs/cve-2022-3080
Patch
Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/
https://security.gentoo.org/glsa/202210-25
Third Party Advisory
https://security.netapp.com/advisory/ntap-20240621-0002/
https://www.debian.org/security/2022/dsa-5235
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*

Версия от 9.16.14 (включая) до 9.16.33 (исключая)

cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*

Версия от 9.18.0 (включая) до 9.18.7 (исключая)

cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*

Версия от 9.19.0 (включая) до 9.19.5 (исключая)

cpe:2.3:a:isc:bind:9.16.14:s1:*:*:supported_preview:*:*:*

cpe:2.3:a:isc:bind:9.16.21:s1:*:*:supported_preview:*:*:*

cpe:2.3:a:isc:bind:9.16.32:s1:*:*:supported_preview:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

EPSS

Процентиль: 27%

0.0009

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-613

Связанные уязвимости

CVE-2022-3080

CVSS3: 7.5

ubuntu

больше 2 лет назад

By sending specific queries to the resolver, an attacker can cause named to crash.

CVE-2022-3080

CVSS3: 7.5

redhat

больше 2 лет назад

By sending specific queries to the resolver, an attacker can cause named to crash.

CVE-2022-3080

CVSS3: 7.5

msrc

больше 2 лет назад

Описание отсутствует

CVE-2022-3080

CVSS3: 7.5

debian

больше 2 лет назад

By sending specific queries to the resolver, an attacker can cause nam ...

GHSA-7mrh-jrcg-wc76

CVSS3: 7.5

github

больше 2 лет назад

By sending specific queries to the resolver, an attacker can cause named to crash.

EPSS

Процентиль: 27%

0.0009

Низкий

7.5 High

CVSS3

Дефекты

NVD-CWE-noinfo

CWE-613