High · published September 21, 2022
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
| Product | Versions | Fixed in |
|---|---|---|
| isc/bind | ≥ 9.9.12, ≤ 9.9.13 | — |
| isc/bind | ≥ 9.10.7, ≤ 9.10.8 | — |
| isc/bind | ≥ 9.11.3, ≤ 9.16.32 | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| isc/bind | all versions | — |
| debian/debian_linux | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| netapp/active_iq_unified_manager | all versions | — |