Description (CNA)
An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ISC / BIND9 | affected Open Source Branch 9.18 9.18.0 through versions before 9.18.7; affected Development Branch 9.19 9.19.0 through versions before 9.19.5 |
CWE
No CWE identifiers supplied.
References
- https://kb.isc.org/docs/cve-2022-2906
- http://www.openwall.com/lists/oss-security/2022/09/21/3
- https://security.gentoo.org/glsa/202210-25
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.