CVE-2022-0396

概要

参考情報

• cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf · Patch
• kb.isc.org/v1/docs/cve-2022-0396 · Mitigation
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYD7US4HZRFUGAJ66ZTHFBYVP5N3OQBY · Mailing List
• security.gentoo.org/glsa/202210-25 · Third Party Advisory
• security.netapp.com/advisory/ntap-20220408-0001 · Third Party Advisory

bind のその他の脆弱性

• CVE-2026-5950中 5.3An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthentic…
• CVE-2026-5947中 5.9Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signe…
• CVE-2026-5946高 7.5Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CH…
• CVE-2026-3593緊急 9.8A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9…
• CVE-2026-3592中 5.3BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially cra…