← Back

CVE-2022-3080

nvd nist
Published: Sep 21, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

By sending specific queries to the resolver, an attacker can cause named to crash.

Affected (9)

Products: Isc: Bind · Fedoraproject: Fedora
Isc
1 product
Bind
Fedoraproject
1 product
Fedora
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Isc
Bind
From 9.16.14 to 9.16.33
Bind
From 9.18.0 to 9.18.7
Bind
From 9.19.0 to 9.19.5
Bind
Version 9.16.14 s1
Bind
Version 9.16.21 s1
Bind
Version 9.16.32 s1
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Fedora
Version 35
Fedora
Version 36
Fedora
Version 37

Related CWEs

CWE-613
Insufficient Session Expiration
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

References (16)

Source: security-officer@isc.org
Mailing ListPatchThird Party Advisory
Source: security-officer@isc.org
PatchVendor Advisory
Source: security-officer@isc.org
Source: security-officer@isc.org
Source: security-officer@isc.org
Source: security-officer@isc.org
Third Party Advisory
Source: security-officer@isc.org
Source: security-officer@isc.org
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.