Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure.
'Broken' in this context is anything that would cause the resolver to reject the query response, such as a mismatch between query and answer name.
This issue affects BIND 9 versions 9.11.4-S1 through 9.11.37-S1 and 9.16.8-S1 through 9.16.36-S1.
References
| Link | Resource |
|---|---|
| https://kb.isc.org/docs/cve-2022-3488 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 03:51
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure. 'Broken' in this context is anything that would cause the resolver to reject the query response, such as a mismatch between query and answer name. This issue affects BIND 9 versions 9.11.4-S1 through 9.11.37-S1 and 9.16.8-S1 through 9.16.36-S1. |
08 Aug 2023, 14:22
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-617 |
03 Feb 2023, 18:25
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| First Time |
Isc
Isc bind |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| References | (MISC) https://kb.isc.org/docs/cve-2022-3488 - Vendor Advisory | |
| CPE | cpe:2.3:a:isc:bind:9.16.36:s1:*:*:supported_preview:*:*:* cpe:2.3:a:isc:bind:9.11.4:s1:*:*:supported_preview:*:*:* cpe:2.3:a:isc:bind:9.16.8:s1:*:*:supported_preview:*:*:* cpe:2.3:a:isc:bind:9.11.37:s1:*:*:supported_preview:*:*:* |
26 Jan 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-01-26 21:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-3488
Mitre link : CVE-2022-3488
CVE.ORG link : CVE-2022-3488
JSON object : View
Products Affected
isc
- bind
CWE
CWE-617
Reachable Assertion