p PatchFirst

CVE-2022-38178

CVE-2022-38178 · Memory leaks in EdDSA DNSSEC verification code

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.

CVSS 7.5 · Alta · EPSS 3,1% · Corrección disponible

Publicación
Actualización

Pila tecnológica: system

Productos y versiones afectados

  • bind9

    Versiones
    • Open Source Branch 9.9 9.9.12 through versions up to and including 9.9.13: Afectada
    • Open Source Branch 9.10 9.10.7 through versions up to and including 9.10.8: Afectada
    • Open Source Branches 9.11 through 9.16 9.11.3 through versions before 9.16.33: Afectada
    • Open Source Branch 9.18 9.18.0 through versions before 9.18.7: Afectada
    • Supported Preview Branch 9.11-S 9.11.4-S1 through versions up to and including 9.11.37-S1: Afectada
    • Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.33-S1: Afectada
    • Development Branch 9.19 9.19.0 through versions before 9.19.5: Afectada

    Sin corrección publicada

  • bind9 Debian:12

    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:9.18.7-1

    Actualiza a 1:9.18.7-1

  • bind9 Debian:13

    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:9.18.7-1

    Actualiza a 1:9.18.7-1

  • bind9 Debian:14

    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:9.18.7-1

    Actualiza a 1:9.18.7-1

  • bind9 Ubuntu:18.04:LTS

    Versiones
    • 1:9.10.3.dfsg.P4-12.6ubuntu1
    • 1:9.11.2.P1-1ubuntu2
    • 1:9.11.2.P1-1ubuntu3
    • 1:9.11.2.P1-1ubuntu4
    • 1:9.11.2.P1-1ubuntu5
    • 1:9.11.3+dfsg-1ubuntu1
    • 1:9.11.3+dfsg-1ubuntu1.1
    • 1:9.11.3+dfsg-1ubuntu1.2
    • 1:9.11.3+dfsg-1ubuntu1.3
    • 1:9.11.3+dfsg-1ubuntu1.5
    • 1:9.11.3+dfsg-1ubuntu1.7
    • 1:9.11.3+dfsg-1ubuntu1.8
    • 1:9.11.3+dfsg-1ubuntu1.9
    • 1:9.11.3+dfsg-1ubuntu1.10
    • 1:9.11.3+dfsg-1ubuntu1.11
    • 1:9.11.3+dfsg-1ubuntu1.12
    • 1:9.11.3+dfsg-1ubuntu1.13
    • 1:9.11.3+dfsg-1ubuntu1.14
    • 1:9.11.3+dfsg-1ubuntu1.15
    • 1:9.11.3+dfsg-1ubuntu1.16
    • 1:9.11.3+dfsg-1ubuntu1.17
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:9.11.3+dfsg-1ubuntu1.18

    Actualiza a 1:9.11.3+dfsg-1ubuntu1.18

  • bind9 Ubuntu:20.04:LTS

    Versiones
    • 1:9.11.5.P4+dfsg-5.1ubuntu2
    • 1:9.11.5.P4+dfsg-5.1ubuntu3
    • 1:9.11.5.P4+dfsg-5.1ubuntu4
    • 1:9.11.5.P4+dfsg-5.1ubuntu5
    • 1:9.11.14+dfsg-1ubuntu1
    • 1:9.11.14+dfsg-3ubuntu1
    • 1:9.16.0-1ubuntu3
    • 1:9.16.0-1ubuntu4
    • 1:9.16.0-1ubuntu5
    • 1:9.16.1-0ubuntu1
    • 1:9.16.1-0ubuntu2
    • 1:9.16.1-0ubuntu2.1
    • 1:9.16.1-0ubuntu2.2
    • 1:9.16.1-0ubuntu2.3
    • 1:9.16.1-0ubuntu2.4
    • 1:9.16.1-0ubuntu2.6
    • 1:9.16.1-0ubuntu2.7
    • 1:9.16.1-0ubuntu2.8
    • 1:9.16.1-0ubuntu2.9
    • 1:9.16.1-0ubuntu2.10
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:9.16.1-0ubuntu2.11

    Actualiza a 1:9.16.1-0ubuntu2.11

  • bind9 Ubuntu:22.04:LTS

    Versiones
    • 1:9.16.15-1ubuntu1
    • 1:9.16.15-1ubuntu2
    • 1:9.16.15-1ubuntu3
    • 1:9.18.0-2ubuntu1
    • 1:9.18.0-2ubuntu2
    • 1:9.18.0-2ubuntu3
    • 1:9.18.1-1ubuntu1
    • 1:9.18.1-1ubuntu1.1
    Intervalos de versiones afectados
    • ECOSYSTEM: < 1:9.18.1-1ubuntu1.2

    Actualiza a 1:9.18.1-1ubuntu1.2

Fuentes originales

Comprueba tu servidor →