CVE-2022-38177
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Memory leak in ECDSA DNSSEC verification code
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
BIND9
- Vendor
- ISC
- Product
- BIND9
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Open Source Branches 9.8 through 9.16 9.8.4 through versions before 9.16.33 | affected | Unavailable | Unavailable | Unavailable | None listed |
| Supported Preview Branches 9.9-S through 9.11-S 9.9.4-S1 through versions up to and including 9.11.37-S1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.33-S1 | affected | Unavailable | Unavailable | Unavailable | None listed |