NetSight
IP …
high7.5

CVE-2022-38178

By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak.

Impact

By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.

Affected products

VendorProductAffected versions
IscBind
from 9.9.12 through 9.9.13
from 9.10.7 through 9.10.8
from 9.11.3 through 9.16.32
Versions 9.11.3, 9.11.5, 9.11.6
DebianDebian Linux
Version 11.0
FedoraprojectFedora
Versions 35, 36, 37
NetappActive Iq Unified Manager
All versions

Weakness classification

CWE-401

References