NetSight
IP …
high7.5

CVE-2022-38177

By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak.

Impact

By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.

Affected products

VendorProductAffected versions
IscBind
from 9.8.4 through 9.16.32
Versions 9.9.3, 9.9.12, 9.9.13, 9.10.5, 9.10.7
DebianDebian Linux
Versions 10.0, 11.0
FedoraprojectFedora
Versions 35, 36, 37
NetappActive Iq Unified Manager
All versions

Weakness classification

CWE-401

References