Vulnerability Details CVE-2022-38177
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 62.7%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2022-38177
-
cpe:2.3:a:isc:bind:9.10.5
-
cpe:2.3:a:isc:bind:9.10.7
-
cpe:2.3:a:isc:bind:9.11.12
-
cpe:2.3:a:isc:bind:9.11.14-s1
-
cpe:2.3:a:isc:bind:9.11.19-s1
-
cpe:2.3:a:isc:bind:9.11.21
-
cpe:2.3:a:isc:bind:9.11.27
-
cpe:2.3:a:isc:bind:9.11.29
-
cpe:2.3:a:isc:bind:9.11.3
-
cpe:2.3:a:isc:bind:9.11.31
-
cpe:2.3:a:isc:bind:9.11.35
-
cpe:2.3:a:isc:bind:9.11.36
-
cpe:2.3:a:isc:bind:9.11.37
-
cpe:2.3:a:isc:bind:9.11.5
-
cpe:2.3:a:isc:bind:9.11.6
-
cpe:2.3:a:isc:bind:9.11.7
-
cpe:2.3:a:isc:bind:9.11.8
-
cpe:2.3:a:isc:bind:9.12.0
-
cpe:2.3:a:isc:bind:9.16.0
-
cpe:2.3:a:isc:bind:9.16.11
-
cpe:2.3:a:isc:bind:9.16.12
-
cpe:2.3:a:isc:bind:9.16.13
-
cpe:2.3:a:isc:bind:9.16.15
-
cpe:2.3:a:isc:bind:9.16.19
-
cpe:2.3:a:isc:bind:9.16.21
-
cpe:2.3:a:isc:bind:9.16.22
-
cpe:2.3:a:isc:bind:9.16.32
-
cpe:2.3:a:isc:bind:9.16.8
-
-
-
-
-
-
cpe:2.3:a:isc:bind:9.9.12
-
cpe:2.3:a:isc:bind:9.9.13
-
-
cpe:2.3:a:netapp:active_iq_unified_manager:-
-
cpe:2.3:o:debian:debian_linux:10.0
-
cpe:2.3:o:debian:debian_linux:11.0
-
cpe:2.3:o:fedoraproject:fedora:35
-
cpe:2.3:o:fedoraproject:fedora:36
-
cpe:2.3:o:fedoraproject:fedora:37