CVE-2022-0396

DoS from specifically crafted TCP packets

State: Published
Severity: 5.3 Medium
Published: Mar 23, 2022
Updated: Sep 16, 2024
Reserved: Jan 27, 2022

Description

BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	isc

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
BINDISC	Open Source Branch 9.16 9.16.11 through versions before 9.16.27Affected Development Branch 9.17 BIND 9.17 all versionsAffected Open Source Branch 9.18 9.18.0Affected Supported Preview Branch 9.16-S 9.16.11-S through versions before 9.16.27-SAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.