high7.5
CVE-2022-3736
BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver r…
Impact
BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Isc | Bind | from 9.16.12 before 9.16.37 from 9.18.0 before 9.18.11 from 9.19.0 before 9.19.9 Versions 9.16.11, 9.16.13, 9.16.14 |