WID-SEC-W-2022-0969

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Internet Systems Consortium BIND: Mehrere Schwachstellen

view advisory published 2022-03-16

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Internet Systems Consortium BIND ausnutzen, um Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2021-25220USmedium4.0—
BIND 9.11.0 -> 9.11.36 9.12.0 -> 9.16.26 9.17.0 -> 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 -> 9.11.36-S1 9.16.8-S1 -> 9.16.26-S1 Versions of BIND 9 earlier than those sho…
CVE-2022-0635UShigh7.5—
Versions affected: BIND 9.18.0 When a vulnerable version of named receives a series of specific queries, the named process will eventually terminate due to a failed assertion check…
CVE-2022-0396USmedium5.3—
BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIN…
CVE-2022-0667UShigh7.5—
When the vulnerability is triggered the BIND process will exit. BIND 9.18.0
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan