Resource management error in ISC BIND - CVE-2022-2795

Vulnerability identifier: #VU67545

CSH Severity: Medium

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2022-2795

CWE-ID: CWE-399

Exploitation vector: Remote access

Exploit availability: No public exploit available

Affected software:
ISC BIND
Amazon Linux AMI
Oracle Linux
Debian Linux
Gentoo Linux
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
Red Hat Enterprise Linux Desktop
Anolis OS
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Power, little endian
CentOS
Red Hat Enterprise Linux for Scientific Computing
IBM AIX
SUSE Linux Enterprise Storage
IBM i
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
Oracle Solaris
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
Ubuntu
Slackware Linux
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Server Applications
openSUSE Leap
openEuler
Junos OS
Fedora
BIG-IP
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
HPE Moonshot 1500 Chassis Manager
Multicluster Engine for Kubernetes
OpenShift Data Foundation (formerly OpenShift Container Storage)
OpenShift Service Mesh
OpenShift Virtualization
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
Dell Secure Connect Gateway
Netcool Operations Insight
Ansible Automation Platform
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Session Smart Router
IBM Power Hardware Management Console (HMC)
IBM VIOS
OpenShift Developer Tools and Services
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
sssd-client
python-sssdconfig
sssd-common
sssd-common-pac
sssd-dbus
sssd-ipa
sssd-kcm
sssd-krb5
sssd-krb5-common
sssd-ldap
sssd-libwbclient
sssd-libwbclient-devel
sssd-polkit-rules
sssd-proxy
sssd-tools
sssd-winbind-idmap
libsss_certmap
libsss_simpleifp
libipa_hbac
libipa_hbac-devel
libsss_autofs
libsss_certmap-devel
libsss_idmap
libsss_idmap-devel
libsss_nss_idmap
libsss_nss_idmap-devel
sssd-ad
libsss_simpleifp-devel
libsss_sudo
python-libipa_hbac
python-libsss_nss_idmap
python-sss
python-sss-murmur
sssd
dhcp (Red Hat package)
bind-libs-debuginfo-32bit
bind-libs-debuginfo
bind-doc
bind-utils
bind-utils-debuginfo
bind-libs
bind-libs-32bit
bind-debugsource
bind-debuginfo
bind-chrootenv
bind
bind9 (Ubuntu package)
bind-chroot
bind-devel
bind-export-devel
bind-export-libs
bind-libs-lite
bind-lite-devel
bind-pkcs11
bind-pkcs11-devel
bind-pkcs11-utils
bind-sdb
bind-sdb-chroot
bind-license
bind-pkcs11-libs
bind (Red Hat package) main
python3-bind
liblwres161-debuginfo
python-bind
libbind9-161
libbind9-161-debuginfo
libdns1110
libdns1110-debuginfo
libirs161
libirs161-debuginfo
libisc1107-32bit
libisc1107
libisc1107-debuginfo-32bit
libisc1107-debuginfo
libisccc161
libisccc161-debuginfo
libisccfg163
libisccfg163-debuginfo
liblwres161
libisccfg1600-32bit-debuginfo
libns1604
libns1604-debuginfo
libns1604-32bit-debuginfo
libns1604-32bit
libisccfg1600-debuginfo
libisccfg1600-32bit
libisccc1600-32bit-debuginfo
libisccc1600-32bit
libisc1606-32bit-debuginfo
libisc1606-32bit
libirs1601-32bit-debuginfo
libirs1601-32bit
libdns1605-32bit-debuginfo
libdns1605-debuginfo
libbind9-1600
libbind9-1600-debuginfo
libdns1605
libdns1605-32bit
libirs-devel
libirs1601
libirs1601-debuginfo
libisc1606
libisc1606-debuginfo
libisccc1600
libisccc1600-debuginfo
libisccfg1600
libbind9-1600-32bit-debuginfo
libbind9-1600-32bit
bind-devel-32bit
python3-bind9.16
bind9.16
bind9.16-chroot
bind9.16-devel
bind9.16-dnssec-utils
bind9.16-libs
bind9.16-utils
bind9.16-doc
bind9.16-license
bind9.16 (Red Hat package)
bind-dnssec-doc
bind-dnssec-utils
net-dns/bind
net-dns/bind-tools
bind9 (Debian package)
bind-dyndb-ldap
Storage Virtualize
HP-UX BIND
PowerStore T
EMC ECS
IBM Cloud Pak for Watson AIOps
Red Hat OpenShift GitOps
IBM Integrated Analytics System
Dell EMC Storage Monitoring and Reporting (SMR)
EMC ViPR SRM
Dell EMC VxRail Appliance
IBM Qradar SIEM
Juniper Junos Space

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within the application when processing large delegations. A remote attacker can flood the target resolver with queries and perform a denial of service (DoS) attack.

Install updates from vendor's website.

• https://kb.isc.org/docs/cve-2022-2795