Test ID:	1.3.6.1.4.1.25623.1.0.124168
Category:	Denial of Service
Title:	ISC BIND DoS Vulnerability (CVE-2022-2906) - Linux
Summary:	ISC BIND is prone to a denial of service (DoS) vulnerability.
Description:	Summary: ISC BIND is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Changes between OpenSSL 1.x and OpenSSL 3.0 expose a flaw in named that causes a small memory leak in key processing when using TKEY records in Diffie-Hellman mode with OpenSSL 3.0.0 and later versions. Vulnerability Impact: An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service. Affected Software/OS: ISC BIND version 9.18.0 through 9.18.6 and 9.19.0 through 9.19.4. Solution: Update to version 9.18.7, 9.19.5 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-2906 https://kb.isc.org/docs/cve-2022-2906 https://security.gentoo.org/glsa/202210-25 http://www.openwall.com/lists/oss-security/2022/09/21/3
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.