CVE-2022-2795
CVE-2022-2795 · Processing large delegations may severely degrade resolver performance
This page contains facts from public vulnerability sources. Check the original advisory before updating.
By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.
CVSS 5.3 · Medium · EPSS 2.3% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
bind9
- Versions
- Open Source Branches 9.0 through 9.16 9.0.0 through versions before 9.16.33: Affected
- Open Source Branch 9.18 9.18.0 through versions before 9.18.7: Affected
- Supported Preview Branches 9.9-S through 9.11-S 9.9.3-S1 through versions up to and including 9.11.37-S1: Affected
- Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.33-S1: Affected
- Development Branch 9.19 9.19.0 through versions before 9.19.5: Affected
No fix published
bind9 Debian:12
- Affected ranges
- ECOSYSTEM: < 1:9.18.7-1
Update to 1:9.18.7-1
bind9 Debian:13
- Affected ranges
- ECOSYSTEM: < 1:9.18.7-1
Update to 1:9.18.7-1
bind9 Debian:14
- Affected ranges
- ECOSYSTEM: < 1:9.18.7-1
Update to 1:9.18.7-1
bind9 Ubuntu:Pro:14.04:LTS
- Versions
- 1:9.9.3.dfsg.P2-4ubuntu1
- 1:9.9.3.dfsg.P2-4ubuntu2
- 1:9.9.3.dfsg.P2-4ubuntu3
- 1:9.9.5.dfsg-2
- 1:9.9.5.dfsg-3
- 1:9.9.5.dfsg-3ubuntu0.1
- 1:9.9.5.dfsg-3ubuntu0.2
- 1:9.9.5.dfsg-3ubuntu0.3
- 1:9.9.5.dfsg-3ubuntu0.4
- 1:9.9.5.dfsg-3ubuntu0.5
- 1:9.9.5.dfsg-3ubuntu0.6
- 1:9.9.5.dfsg-3ubuntu0.7
- 1:9.9.5.dfsg-3ubuntu0.8
- 1:9.9.5.dfsg-3ubuntu0.9
- 1:9.9.5.dfsg-3ubuntu0.10
- 1:9.9.5.dfsg-3ubuntu0.11
- 1:9.9.5.dfsg-3ubuntu0.12
- 1:9.9.5.dfsg-3ubuntu0.13
- 1:9.9.5.dfsg-3ubuntu0.14
- 1:9.9.5.dfsg-3ubuntu0.15
- 1:9.9.5.dfsg-3ubuntu0.16
- 1:9.9.5.dfsg-3ubuntu0.17
- 1:9.9.5.dfsg-3ubuntu0.18
- 1:9.9.5.dfsg-3ubuntu0.19
- 1:9.9.5.dfsg-3ubuntu0.19+esm1
- 1:9.9.5.dfsg-3ubuntu0.19+esm2
- 1:9.9.5.dfsg-3ubuntu0.19+esm3
- 1:9.9.5.dfsg-3ubuntu0.19+esm4
- 1:9.9.5.dfsg-3ubuntu0.19+esm5
- 1:9.9.5.dfsg-3ubuntu0.19+esm6
- Affected ranges
- ECOSYSTEM: < 1:9.9.5.dfsg-3ubuntu0.19+esm7
Update to 1:9.9.5.dfsg-3ubuntu0.19+esm7
bind9 Ubuntu:Pro:16.04:LTS
- Versions
- 1:9.9.5.dfsg-11ubuntu1
- 1:9.9.5.dfsg-12
- 1:9.9.5.dfsg-12.1
- 1:9.9.5.dfsg-12.1ubuntu1
- 1:9.10.3.dfsg.P2-4
- 1:9.10.3.dfsg.P2-5
- 1:9.10.3.dfsg.P4-3
- 1:9.10.3.dfsg.P4-4
- 1:9.10.3.dfsg.P4-5
- 1:9.10.3.dfsg.P4-8
- 1:9.10.3.dfsg.P4-8ubuntu1
- 1:9.10.3.dfsg.P4-8ubuntu1.1
- 1:9.10.3.dfsg.P4-8ubuntu1.2
- 1:9.10.3.dfsg.P4-8ubuntu1.3
- 1:9.10.3.dfsg.P4-8ubuntu1.4
- 1:9.10.3.dfsg.P4-8ubuntu1.5
- 1:9.10.3.dfsg.P4-8ubuntu1.6
- 1:9.10.3.dfsg.P4-8ubuntu1.7
- 1:9.10.3.dfsg.P4-8ubuntu1.8
- 1:9.10.3.dfsg.P4-8ubuntu1.9
- 1:9.10.3.dfsg.P4-8ubuntu1.10
- 1:9.10.3.dfsg.P4-8ubuntu1.11
- 1:9.10.3.dfsg.P4-8ubuntu1.12
- 1:9.10.3.dfsg.P4-8ubuntu1.14
- 1:9.10.3.dfsg.P4-8ubuntu1.15
- 1:9.10.3.dfsg.P4-8ubuntu1.16
- 1:9.10.3.dfsg.P4-8ubuntu1.17
- 1:9.10.3.dfsg.P4-8ubuntu1.18
- 1:9.10.3.dfsg.P4-8ubuntu1.19
- 1:9.10.3.dfsg.P4-8ubuntu1.19+esm1
- 1:9.10.3.dfsg.P4-8ubuntu1.19+esm2
- Affected ranges
- ECOSYSTEM: < 1:9.10.3.dfsg.P4-8ubuntu1.19+esm3
Update to 1:9.10.3.dfsg.P4-8ubuntu1.19+esm3
bind9 Ubuntu:18.04:LTS
- Versions
- 1:9.10.3.dfsg.P4-12.6ubuntu1
- 1:9.11.2.P1-1ubuntu2
- 1:9.11.2.P1-1ubuntu3
- 1:9.11.2.P1-1ubuntu4
- 1:9.11.2.P1-1ubuntu5
- 1:9.11.3+dfsg-1ubuntu1
- 1:9.11.3+dfsg-1ubuntu1.1
- 1:9.11.3+dfsg-1ubuntu1.2
- 1:9.11.3+dfsg-1ubuntu1.3
- 1:9.11.3+dfsg-1ubuntu1.5
- 1:9.11.3+dfsg-1ubuntu1.7
- 1:9.11.3+dfsg-1ubuntu1.8
- 1:9.11.3+dfsg-1ubuntu1.9
- 1:9.11.3+dfsg-1ubuntu1.10
- 1:9.11.3+dfsg-1ubuntu1.11
- 1:9.11.3+dfsg-1ubuntu1.12
- 1:9.11.3+dfsg-1ubuntu1.13
- 1:9.11.3+dfsg-1ubuntu1.14
- 1:9.11.3+dfsg-1ubuntu1.15
- 1:9.11.3+dfsg-1ubuntu1.16
- 1:9.11.3+dfsg-1ubuntu1.17
- Affected ranges
- ECOSYSTEM: < 1:9.11.3+dfsg-1ubuntu1.18
Update to 1:9.11.3+dfsg-1ubuntu1.18
bind9 Ubuntu:20.04:LTS
- Versions
- 1:9.11.5.P4+dfsg-5.1ubuntu2
- 1:9.11.5.P4+dfsg-5.1ubuntu3
- 1:9.11.5.P4+dfsg-5.1ubuntu4
- 1:9.11.5.P4+dfsg-5.1ubuntu5
- 1:9.11.14+dfsg-1ubuntu1
- 1:9.11.14+dfsg-3ubuntu1
- 1:9.16.0-1ubuntu3
- 1:9.16.0-1ubuntu4
- 1:9.16.0-1ubuntu5
- 1:9.16.1-0ubuntu1
- 1:9.16.1-0ubuntu2
- 1:9.16.1-0ubuntu2.1
- 1:9.16.1-0ubuntu2.2
- 1:9.16.1-0ubuntu2.3
- 1:9.16.1-0ubuntu2.4
- 1:9.16.1-0ubuntu2.6
- 1:9.16.1-0ubuntu2.7
- 1:9.16.1-0ubuntu2.8
- 1:9.16.1-0ubuntu2.9
- 1:9.16.1-0ubuntu2.10
- Affected ranges
- ECOSYSTEM: < 1:9.16.1-0ubuntu2.11
Update to 1:9.16.1-0ubuntu2.11
bind9-libs Ubuntu:20.04:LTS
- Versions
- 1:9.11.16+dfsg-3~build1
- 1:9.11.16+dfsg-3~ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
bind9 Ubuntu:22.04:LTS
- Versions
- 1:9.16.15-1ubuntu1
- 1:9.16.15-1ubuntu2
- 1:9.16.15-1ubuntu3
- 1:9.18.0-2ubuntu1
- 1:9.18.0-2ubuntu2
- 1:9.18.0-2ubuntu3
- 1:9.18.1-1ubuntu1
- 1:9.18.1-1ubuntu1.1
- Affected ranges
- ECOSYSTEM: < 1:9.18.1-1ubuntu1.2
Update to 1:9.18.1-1ubuntu1.2
bind9-libs Ubuntu:22.04:LTS
- Versions
- 1:9.11.19+dfsg-2.1ubuntu1
- 1:9.11.19+dfsg-2.1ubuntu2
- 1:9.11.19+dfsg-2.1ubuntu3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
isc-dhcp Ubuntu:24.04:LTS
- Versions
- 4.4.3-P1-2ubuntu5
- 4.4.3-P1-4ubuntu1
- 4.4.3-P1-4ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
isc-dhcp Ubuntu:25.10
- Versions
- 4.4.3-P1-4ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
isc-dhcp Ubuntu:26.04:LTS
- Versions
- 4.4.3-P1-4ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://kb.isc.org/docs/cve-2022-2795
- http://www.openwall.com/lists/oss-security/2022/09/21/3
- https://www.debian.org/security/2022/dsa-5235
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/
- https://lists.debian.org/debian-lts-announce/2022/10/msg00007.html
- https://security.gentoo.org/glsa/202210-25
- https://security.netapp.com/advisory/ntap-20241129-0002/
- https://nvd.nist.gov/vuln/detail/CVE-2022-2795