TI-2022-17871 CVE-2022-38177 · GHSA-5vfq-rv44-c5ff
Memory leak in ECDSA DNSSEC verification code
Priority MEDIUM 45
By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak.
RHSA-2022:6779
bind security update
Released 2022-10-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.4) bind-32:9.11.26-4.el8_4.1, bind-chroot-32:9.11.26-4.el8_4.1, bind-devel-32:9.11.26-4.el8_4.1 +12
- Red Hat Enterprise Linux BaseOS EUS (v.8.4) bind-32:9.11.26-4.el8_4.1, bind-export-devel-32:9.11.26-4.el8_4.1, bind-export-libs-32:9.11.26-4.el8_4.1
Fixes 2 records
TI-2022-17872 CVE-2022-38178 · GHSA-349w-cgp3-287r
Memory leaks in EdDSA DNSSEC verification code
Priority MEDIUM 44
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak.