High · published September 21, 2022
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
| Product | Versions | Fixed in |
|---|---|---|
| isc/bind | ≥ 9.8.4, ≤ 9.16.32 | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| netapp/active_iq_unified_manager | all versions | — |