Test Kennung:	1.3.6.1.4.1.25623.1.0.124173
Kategorie:	Denial of Service
Titel:	ISC BIND DoS Vulnerability (CVE-2022-38178) - Windows
Zusammenfassung:	ISC BIND is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: ISC BIND is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The DNSSEC verification code for the EdDSA algorithm leaks memory when there is a signature length mismatch. Vulnerability Impact: By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources. Affected Software/OS: ISC BIND versions 9.9.12 through 9.9.13, 9.10.7 through 9.10.8, 9.11.4-S1 through 9.11.37-S1, 9.16.8-S1 through 9.16.32-S1, 9.18.0 through 9.18.6 and 9.19.0 through 9.19.4. Solution: Update to version 9.16.33, 9.18.7, 9.19.5, 9.16.33-S1 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2022-38178 https://kb.isc.org/docs/cve-2022-38178 Debian Security Information: DSA-5235 (Google Search) https://www.debian.org/security/2022/dsa-5235 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/ https://security.gentoo.org/glsa/202210-25 https://lists.debian.org/debian-lts-announce/2022/10/msg00007.html http://www.openwall.com/lists/oss-security/2022/09/21/3
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.