CVE-2022-3736 — named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries

CVE-2022-3736

named configured to answer from stale cache may terminate unexpectedly while processing RRSIG queries PUBLISHED

Description (CNA)

BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1.

Affected (CNA)

Vendor / product	Versions
ISC / BIND 9	affected 9.16.12 through 9.16.36; affected 9.18.0 through 9.18.10; affected 9.19.0 through 9.19.8; affected 9.16.12-S1 through 9.16.36-S1

CWE

No CWE identifiers supplied.

References

https://kb.isc.org/docs/cve-2022-3736

ADP enrichment

CVE

No English description supplied.

https://kb.isc.org/docs/cve-2022-3736

CISA-ADP

No English description supplied.

No references supplied.