CVE-2022-1183
CVE-2022-1183 · Destroying a TLS session early causes assertion failure
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS is used by both DNS over TLS (DoT) and DNS over HTTPS (DoH), but configurations using DoT alone are unaffected. Affects BIND 9.18.0 -> 9.18.2 and version 9.19.0 of the BIND 9.19 development branch.
CVSS 7.5 · Alta · EPSS 6,3% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
bind9
- Versiones
- Open Source Branch 9.18 9.18.0 through versions before 9.18.3: Afectada
- Development Branch 9.19 9.19.0: Afectada
Sin corrección publicada
bind9 Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.18.3-1
Actualiza a 1:9.18.3-1
bind9 Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.18.3-1
Actualiza a 1:9.18.3-1
bind9 Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.18.3-1
Actualiza a 1:9.18.3-1
bind9 Ubuntu:22.04:LTS
- Versiones
- 1:9.16.15-1ubuntu1
- 1:9.16.15-1ubuntu2
- 1:9.16.15-1ubuntu3
- 1:9.18.0-2ubuntu1
- 1:9.18.0-2ubuntu2
- 1:9.18.0-2ubuntu3
- 1:9.18.1-1ubuntu1
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.18.1-1ubuntu1.1
Actualiza a 1:9.18.1-1ubuntu1.1