CVE-2022-3736 Affecting bind9 package, versions <1:9.18.11-1
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-DEBIAN12-BIND9-3248394
- published 26 Jan 2023
- disclosed 26 Jan 2023
Introduced: 26 Jan 2023
CVE-2022-3736 Open this link in a new tabHow to fix?
Upgrade Debian:12 bind9 to version 1:9.18.11-1 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream bind9 package and not the bind9 package as distributed by Debian.
See How to fix? for Debian:12 relevant fixed versions and status.
BIND 9 resolver can crash when stale cache and stale answers are enabled, option stale-answer-client-timeout is set to a positive integer, and the resolver receives an RRSIG query.
This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1.