CVE-2022-38178
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2022
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Memory leaks in EdDSA DNSSEC verification code
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
BIND9
- Vendor
- ISC
- Product
- BIND9
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| Open Source Branch 9.9 9.9.12 through versions up to and including 9.9.13 | affected | Unavailable | Unavailable | Unavailable | None listed |
| Open Source Branch 9.10 9.10.7 through versions up to and including 9.10.8 | affected | Unavailable | Unavailable | Unavailable | None listed |
| Open Source Branches 9.11 through 9.16 9.11.3 through versions before 9.16.33 | affected | Unavailable | Unavailable | Unavailable | None listed |
| Open Source Branch 9.18 9.18.0 through versions before 9.18.7 | affected | Unavailable | Unavailable | Unavailable | None listed |
| Supported Preview Branch 9.11-S 9.11.4-S1 through versions up to and including 9.11.37-S1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.33-S1 | affected | Unavailable | Unavailable | Unavailable | None listed |
| Development Branch 9.19 9.19.0 through versions before 9.19.5 | affected | Unavailable | Unavailable | Unavailable | None listed |