ID de Prueba:	1.3.6.1.4.1.25623.1.0.124168
Categoría:	Denial of Service
Título:	ISC BIND DoS Vulnerability (CVE-2022-2906) - Linux
Resumen:	ISC BIND is prone to a denial of service (DoS) vulnerability.
Descripción:	Summary: ISC BIND is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Changes between OpenSSL 1.x and OpenSSL 3.0 expose a flaw in named that causes a small memory leak in key processing when using TKEY records in Diffie-Hellman mode with OpenSSL 3.0.0 and later versions. Vulnerability Impact: An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service. Affected Software/OS: ISC BIND version 9.18.0 through 9.18.6 and 9.19.0 through 9.19.4. Solution: Update to version 9.18.7, 9.19.5 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2022-2906 https://kb.isc.org/docs/cve-2022-2906 https://security.gentoo.org/glsa/202210-25 http://www.openwall.com/lists/oss-security/2022/09/21/3
Copyright	Copyright (C) 2022 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.