CVE-2022-2881
CVE-2022-2881 · Buffer overread in statistics channel code
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process.
CVSS 5.5 · Medium · EPSS 1.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
bind9
- Versions
- Open Source Branch 9.18 9.18.0 through versions before 9.18.7: Affected
- Development Branch 9.19 9.19.0 through versions before 9.19.5: Affected
No fix published
bind9 Debian:12
- Affected ranges
- ECOSYSTEM: < 1:9.18.7-1
Update to 1:9.18.7-1
bind9 Debian:13
- Affected ranges
- ECOSYSTEM: < 1:9.18.7-1
Update to 1:9.18.7-1
bind9 Debian:14
- Affected ranges
- ECOSYSTEM: < 1:9.18.7-1
Update to 1:9.18.7-1
bind9 Ubuntu:22.04:LTS
- Versions
- 1:9.16.15-1ubuntu1
- 1:9.16.15-1ubuntu2
- 1:9.16.15-1ubuntu3
- 1:9.18.0-2ubuntu1
- 1:9.18.0-2ubuntu2
- 1:9.18.0-2ubuntu3
- 1:9.18.1-1ubuntu1
- 1:9.18.1-1ubuntu1.1
- Affected ranges
- ECOSYSTEM: < 1:9.18.1-1ubuntu1.2
Update to 1:9.18.1-1ubuntu1.2