Vulnerability · Published Mar 23, 2022 · Assigned by isc
CVE-2022-0396DoS from specifically crafted TCP packets
Medium 5.3
In plain English
A medium-severity security flaw in BIND from ISC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.7% (higher than 86% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)2.7%top 14.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | bind | 32:9.16.23-5.el9_1 | ALSA-2022:8068 |
| AlmaLinux:9 | bind-chroot | 32:9.16.23-5.el9_1 | ALSA-2022:8068 |
| AlmaLinux:9 | bind-devel | 32:9.16.23-5.el9_1 | ALSA-2022:8068 |
| AlmaLinux:9 | bind-dnssec-doc | 32:9.16.23-5.el9_1 | ALSA-2022:8068 |
| AlmaLinux:9 | bind-dnssec-utils | 32:9.16.23-5.el9_1 | ALSA-2022:8068 |
| AlmaLinux:9 | bind-doc | 32:9.16.23-5.el9_1 | ALSA-2022:8068 |
| AlmaLinux:9 | bind-libs | 32:9.16.23-5.el9_1 | ALSA-2022:8068 |
| AlmaLinux:9 | bind-license | 32:9.16.23-5.el9_1 | ALSA-2022:8068 |
| AlmaLinux:9 | bind-utils | 32:9.16.23-5.el9_1 | ALSA-2022:8068 |
| AlmaLinux:8 | bind9.16 | 32:9.16.23-0.9.el8.1 | ALSA-2022:7643 |
| AlmaLinux:8 | bind9.16-chroot | 32:9.16.23-0.9.el8.1 | ALSA-2022:7643 |
| AlmaLinux:8 | bind9.16-devel | 32:9.16.23-0.9.el8.1 | ALSA-2022:7643 |
| AlmaLinux:8 | bind9.16-dnssec-utils | 32:9.16.23-0.9.el8.1 | ALSA-2022:7643 |
| AlmaLinux:8 | bind9.16-doc | 32:9.16.23-0.9.el8.1 | ALSA-2022:7643 |
| AlmaLinux:8 | bind9.16-libs | 32:9.16.23-0.9.el8.1 | ALSA-2022:7643 |
| AlmaLinux:8 | bind9.16-license | 32:9.16.23-0.9.el8.1 | ALSA-2022:7643 |
| AlmaLinux:8 | bind9.16-utils | 32:9.16.23-0.9.el8.1 | ALSA-2022:7643 |
| AlmaLinux:9 | python3-bind | 32:9.16.23-5.el9_1 | ALSA-2022:8068 |
| AlmaLinux:8 | python3-bind9.16 | 32:9.16.23-0.9.el8.1 | ALSA-2022:7643 |
| Alpine:v3.20 | bind | 9.16.27-r0 | ALPINE-CVE-2022-0396 |
| Alpine:v3.21 | bind | 9.16.27-r0 | ALPINE-CVE-2022-0396 |
| Alpine:v3.22 | bind | 9.16.27-r0 | ALPINE-CVE-2022-0396 |
| Alpine:v3.23 | bind | 9.16.27-r0 | ALPINE-CVE-2022-0396 |
| Alpine:v3.24 | bind | 9.16.27-r0 | ALPINE-CVE-2022-0396 |
| Debian:12 | bind9 | 1:9.18.1-1 | DEBIAN-CVE-2022-0396 |
| Debian:13 | bind9 | 1:9.18.1-1 | DEBIAN-CVE-2022-0396 |
| Debian:14 | bind9 | 1:9.18.1-1 | DEBIAN-CVE-2022-0396 |
| Rocky Linux:9 | bind | 2:9.16.23-5.el9_1 | RLSA-2022:8068 |
| Rocky Linux:8 | bind9.16 | 2:9.16.23-0.9.el8.1 | RLSA-2022:7643 |
| Ubuntu:22.04:LTS | bind9 | 1:9.18.0-2ubuntu3 | UBUNTU-CVE-2022-0396 |