CVE-2022-0635

HIGH 7.5CVE-2022-0635 · Published 23/03/2022 · updated 17/06/2026

In short

CVE-2022-0635 is a HIGH (CVSS 7.5) vulnerability affecting bind (isc).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 72.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
bind isc	`= 9.18.0`	No fix yet

Description

Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion check.

References

kb.isc.org/v1/docs/cve-2022-0635 · Mitigation
security.netapp.com/advisory/ntap-20220408-0001 · Third Party Advisory

More vulnerabilities in bind

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

bind

isc

= 9.18.0

No fix yet

More vulnerabilities in bind

See all →