TI-2022-17871 CVE-2022-38177 · GHSA-5vfq-rv44-c5ff
Memory leak in ECDSA DNSSEC verification code
Priority MEDIUM 45
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak.
RHSA-2022:6764
bind security update
Released 2022-10-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v. 8.1) bind-32:9.11.4-26.P2.el8_1.6, bind-chroot-32:9.11.4-26.P2.el8_1.6, bind-devel-32:9.11.4-26.P2.el8_1.6 +12
- Red Hat Enterprise Linux BaseOS E4S (v. 8.1) bind-32:9.11.4-26.P2.el8_1.6, bind-export-devel-32:9.11.4-26.P2.el8_1.6, bind-export-libs-32:9.11.4-26.P2.el8_1.6
Fixes 2 records
TI-2022-17872 CVE-2022-38178 · GHSA-349w-cgp3-287r
Memory leaks in EdDSA DNSSEC verification code
Priority MEDIUM 44
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak.