Vulnerability · Published Sep 21, 2022 · Assigned by isc
CVE-2022-38178Memory leaks in EdDSA DNSSEC verification code
High 7.5
In plain English
A high-severity memory leak in BIND9 from ISC. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.1% (higher than 88% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)3.1%top 12.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | bind | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:9 | bind | 32:9.16.23-1.el9_0.1 | ALSA-2022:6763 |
| AlmaLinux:8 | bind-chroot | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:9 | bind-chroot | 32:9.16.23-1.el9_0.1 | ALSA-2022:6763 |
| AlmaLinux:8 | bind-devel | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:9 | bind-devel | 32:9.16.23-1.el9_0.1 | ALSA-2022:6763 |
| AlmaLinux:9 | bind-dnssec-doc | 32:9.16.23-1.el9_0.1 | ALSA-2022:6763 |
| AlmaLinux:9 | bind-dnssec-utils | 32:9.16.23-1.el9_0.1 | ALSA-2022:6763 |
| AlmaLinux:8 | bind-export-devel | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:8 | bind-export-libs | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:8 | bind-libs | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:9 | bind-libs | 32:9.16.23-1.el9_0.1 | ALSA-2022:6763 |
| AlmaLinux:8 | bind-libs-lite | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:8 | bind-license | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:9 | bind-license | 32:9.16.23-1.el9_0.1 | ALSA-2022:6763 |
| AlmaLinux:8 | bind-lite-devel | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:8 | bind-pkcs11 | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:8 | bind-pkcs11-devel | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:8 | bind-pkcs11-libs | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:8 | bind-pkcs11-utils | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:8 | bind-sdb | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:8 | bind-sdb-chroot | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:8 | bind-utils | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:9 | bind-utils | 32:9.16.23-1.el9_0.1 | ALSA-2022:6763 |
| AlmaLinux:8 | bind9.16 | 32:9.16.23-0.7.el8_6.1 | ALSA-2022:6781 |
| AlmaLinux:8 | bind9.16-chroot | 32:9.16.23-0.7.el8_6.1 | ALSA-2022:6781 |
| AlmaLinux:8 | bind9.16-devel | 32:9.16.23-0.7.el8_6.1 | ALSA-2022:6781 |
| AlmaLinux:8 | bind9.16-dnssec-utils | 32:9.16.23-0.7.el8_6.1 | ALSA-2022:6781 |
| AlmaLinux:8 | bind9.16-doc | 32:9.16.23-0.7.el8_6.1 | ALSA-2022:6781 |
| AlmaLinux:8 | bind9.16-libs | 32:9.16.23-0.7.el8_6.1 | ALSA-2022:6781 |
| AlmaLinux:8 | bind9.16-license | 32:9.16.23-0.7.el8_6.1 | ALSA-2022:6781 |
| AlmaLinux:8 | bind9.16-utils | 32:9.16.23-0.7.el8_6.1 | ALSA-2022:6781 |
| AlmaLinux:8 | python3-bind | 32:9.11.36-3.el8_6.1 | ALSA-2022:6778 |
| AlmaLinux:9 | python3-bind | 32:9.16.23-1.el9_0.1 | ALSA-2022:6763 |
| AlmaLinux:8 | python3-bind9.16 | 32:9.16.23-0.7.el8_6.1 | ALSA-2022:6781 |
| Alpine:v3.20 | bind | 9.18.7-r0 | ALPINE-CVE-2022-38178 |
| Alpine:v3.21 | bind | 9.18.7-r0 | ALPINE-CVE-2022-38178 |
| Alpine:v3.22 | bind | 9.18.7-r0 | ALPINE-CVE-2022-38178 |
| Alpine:v3.23 | bind | 9.18.7-r0 | ALPINE-CVE-2022-38178 |
| Alpine:v3.24 | bind | 9.18.7-r0 | ALPINE-CVE-2022-38178 |
| Debian:12 | bind9 | 1:9.18.7-1 | DEBIAN-CVE-2022-38178 |
| Debian:13 | bind9 | 1:9.18.7-1 | DEBIAN-CVE-2022-38178 |
| Debian:14 | bind9 | 1:9.18.7-1 | DEBIAN-CVE-2022-38178 |
| Rocky Linux:8 | bind | 2:9.11.36-3.el8_6.1 | RLSA-2022:6778 |
| Rocky Linux:9 | bind | 2:9.16.23-1.el9_0.1 | RLSA-2022:6763 |
| Rocky Linux:8 | bind9.16 | 2:9.16.23-0.7.el8_6.1 | RLSA-2022:6781 |
| Ubuntu:22.04:LTS | bind9 | 1:9.18.1-1ubuntu1.2 | USN-5626-1 |
| Ubuntu:22.04:LTS | bind9 | 1:9.18.1-1ubuntu1.2 | UBUNTU-CVE-2022-38178 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ISC | BIND9 | Open Source Branch 9.9 9.9.12 through versions up to and including 9.9.13Open Source Branch 9.10 9.10.7 through versions up to and including 9.10.8Open Source Branches 9.11 through 9.16 9.11.3 through versions before 9.16.33Open Source Branch 9.18 9.18.0 through versions before 9.18.7Supported Preview Branch 9.11-S 9.11.4-S1 through versions up to and including 9.11.37-S1Supported Preview Branch 9.16-S 9.16.8-S1 through versions before 9.16.33-S1Development Branch 9.19 9.19.0 through versions before 9.19.5 |
Weakness: CWE-401 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://kb.isc.org/docs/cve-2022-38178
- [oss-security] 20220921 ISC has disclosed six vulnerabilities in BIND (CVE-2022-2795, CVE-2022-2881, CVE-2022-2906, CVE-2022-3080, CVE-2022-38177, CVE-2022-38178) mailing-list
- DSA-5235 vendor-advisory
- FEDORA-2022-ef038365de vendor-advisory
- FEDORA-2022-8268735e06 vendor-advisory
- FEDORA-2022-b197d64471 vendor-advisory
- [debian-lts-announce] 20221005 [SECURITY] [DLA 3138-1] bind9 security update mailing-list
- GLSA-202210-25 vendor-advisory
- https://security.netapp.com/advisory/ntap-20221228-0009/