TI-2022-17871 CVE-2022-38177 · GHSA-5vfq-rv44-c5ff
Memory leak in ECDSA DNSSEC verification code
Priority MEDIUM 45
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak.
RHSA-2022:6765
bind security update
Released 2022-10-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bind-32:9.11.4-26.P2.el7_9.10, bind-export-libs-32:9.11.4-26.P2.el7_9.10, bind-libs-32:9.11.4-26.P2.el7_9.10 +3
- Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.11.4-26.P2.el7_9.10, bind-chroot-32:9.11.4-26.P2.el7_9.10, bind-devel-32:9.11.4-26.P2.el7_9.10 +8
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.11.4-26.P2.el7_9.10, bind-chroot-32:9.11.4-26.P2.el7_9.10, bind-devel-32:9.11.4-26.P2.el7_9.10 +8
- Red Hat Enterprise Linux Server (v. 7) bind-32:9.11.4-26.P2.el7_9.10, bind-chroot-32:9.11.4-26.P2.el7_9.10, bind-export-libs-32:9.11.4-26.P2.el7_9.10 +11
- Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.11.4-26.P2.el7_9.10, bind-devel-32:9.11.4-26.P2.el7_9.10.ppc, bind-export-devel-32:9.11.4-26.P2.el7_9.10 +7
- Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.11.4-26.P2.el7_9.10, bind-chroot-32:9.11.4-26.P2.el7_9.10, bind-export-libs-32:9.11.4-26.P2.el7_9.10 +7
- Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.11.4-26.P2.el7_9.10, bind-export-devel-32:9.11.4-26.P2.el7_9.10, bind-lite-devel-32:9.11.4-26.P2.el7_9.10 +3
Fixes 2 records
TI-2022-17872 CVE-2022-38178 · GHSA-349w-cgp3-287r
Memory leaks in EdDSA DNSSEC verification code
Priority MEDIUM 44
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak.