CVE-2022-2881

概要

参考情報

• openwall.com/lists/oss-security/2022/09/21/3 · Mailing List
• kb.isc.org/docs/cve-2022-2881 · Patch
• security.gentoo.org/glsa/202210-25 · Third Party Advisory

bind のその他の脆弱性

• CVE-2026-5950中 5.3An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthentic…
• CVE-2026-5947中 5.9Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signe…
• CVE-2026-5946高 7.5Multiple flaws have been identified in `named` related to the handling of DNS messages whose CLASS is not Internet (`IN`) — for example, `CH…
• CVE-2026-3593緊急 9.8A use-after-free vulnerability exists within the DNS-over-HTTPS implementation. This issue affects BIND 9 versions 9.20.0 through 9.20.22, 9…
• CVE-2026-3592中 5.3BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a specially cra…