CVE-2022-38177

By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
http://www.openwall.com/lists/oss-security/2022/09/21/3	Mailing List Patch Third Party Advisory
https://kb.isc.org/docs/cve-2022-38177	Patch Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/10/msg00007.html	Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/
https://security.gentoo.org/glsa/202210-25	Third Party Advisory
https://security.netapp.com/advisory/ntap-20221228-0010/	Third Party Advisory
https://www.debian.org/security/2022/dsa-5235	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:isc:bind:::::-:::*
	cpe:2.3:a:isc:bind:9.9.3:s1::::supported_preview::*
	cpe:2.3:a:isc:bind:9.9.3:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.9.12:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.9.13:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.10.5:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.10.7:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.11.3:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.11.5:s3::::supported_preview::*
	cpe:2.3:a:isc:bind:9.11.5:s3:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.11.5:s5:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.11.5:s6:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.11.6:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.11.7:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.11.8:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.11.12:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.11.14-s1::::preview:::
	cpe:2.3:a:isc:bind:9.11.19-s1::::preview:::
	cpe:2.3:a:isc:bind:9.11.21:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.11.27:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.11.29:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.11.35:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.11.37:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.16.8:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.16.11:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.16.13:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.16.21:s1:::supported_preview:::*
	cpe:2.3:a:isc:bind:9.16.32:s1:::supported_preview:::*

Configuration 2 (hide)

OR	cpe:2.3:o:debian:debian_linux:10.0:::::::*
	cpe:2.3:o:debian:debian_linux:11.0:::::::*

Configuration 3 (hide)

OR	cpe:2.3:o:fedoraproject:fedora:35:::::::*
	cpe:2.3:o:fedoraproject:fedora:36:::::::*
	cpe:2.3:o:fedoraproject:fedora:37:::::::*

Configuration 4 (hide)

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*

History

No history.

Information

Published : 2022-09-21 11:15

Updated : 2023-11-07 03:50

NVD link : CVE-2022-38177

Mitre link : CVE-2022-38177

CVE.ORG link : CVE-2022-38177

JSON object : View

Products Affected

debian

debian_linux

netapp

active_iq_unified_manager

fedoraproject

fedora

isc

bind

CWE

CWE-401

Missing Release of Memory after Effective Lifetime

{"id": "CVE-2022-38177", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "security-officer@isc.org", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2022-09-21T11:15:09.677", "references": [{"url": "http://www.openwall.com/lists/oss-security/2022/09/21/3", "tags": ["Mailing List", "Patch", "Third Party Advisory"], "source": "security-officer@isc.org"}, {"url": "https://kb.isc.org/docs/cve-2022-38177", "tags": ["Patch", "Third Party Advisory"], "source": "security-officer@isc.org"}, {"url": "https://lists.debian.org/debian-lts-announce/2022/10/msg00007.html", "tags": ["Mailing List", "Third Party Advisory"], "source": "security-officer@isc.org"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/", "source": "security-officer@isc.org"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/", "source": "security-officer@isc.org"}, {"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/", "source": "security-officer@isc.org"}, {"url": "https://security.gentoo.org/glsa/202210-25", "tags": ["Third Party Advisory"], "source": "security-officer@isc.org"}, {"url": "https://security.netapp.com/advisory/ntap-20221228-0010/", "tags": ["Third Party Advisory"], "source": "security-officer@isc.org"}, {"url": "https://www.debian.org/security/2022/dsa-5235", "tags": ["Third Party Advisory"], "source": "security-officer@isc.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-401"}]}], "descriptions": [{"lang": "en", "value": "By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources."}, {"lang": "es", "value": "Al falsificar el resolver objetivo con respuestas que presentan una firma ECDSA malformada, un atacante puede desencadenar una peque\u00f1a p\u00e9rdida de memoria. Es posible erosionar gradualmente la memoria disponible hasta el punto de que named sea bloqueado por falta de recursos"}], "lastModified": "2023-11-07T03:50:04.117", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "51D9C44E-9BD4-4378-87F3-B73C30383A56", "versionEndIncluding": "9.16.32", "versionStartIncluding": "9.8.4"}, {"criteria": "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:*:supported_preview:*:*", "vulnerable": true, "matchCriteriaId": "A01B5F4E-1F55-4DED-BF30-E0B436D8B965"}, {"criteria": "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "40EE014B-0CD8-45F3-BEDB-AE6368A78B04"}, {"criteria": "cpe:2.3:a:isc:bind:9.9.12:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "DAF8FA8C-0526-4389-AEC6-92AD62AA3929"}, {"criteria": "cpe:2.3:a:isc:bind:9.9.13:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "1A9BA952-A5DF-4CBA-8928-0B373C013C32"}, {"criteria": "cpe:2.3:a:isc:bind:9.10.5:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "CAD41122-C5D8-4256-8CB7-FF88DCD96A13"}, {"criteria": "cpe:2.3:a:isc:bind:9.10.7:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "6243685F-1E5B-4FF6-AE1B-44798032FBA6"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "C2FE13E1-0646-46FC-875B-CB4C34E20101"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.5:s3:*:*:*:supported_preview:*:*", "vulnerable": true, "matchCriteriaId": "B6F72F80-D178-4F6D-8D16-85C0DEEE275B"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.5:s3:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "1AA16E51-819C-4A1B-B66E-1C60C1782C0D"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.5:s5:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "91533F9F-C0E5-4E84-8A4C-F744F956BF97"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.5:s6:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "46E6A4BD-D69B-4A70-821D-5612DD1315EF"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "8AF9D390-0D5B-4963-A2D3-BF1E7CD95E9D"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "AB2B92F1-6BA8-41CA-9000-E0633462CC28"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.8:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "02CA4635-7DFC-408E-A837-856E0F96CA1B"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.12:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "3CABCB08-B838-45F7-AA87-77C6B8767DD0"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.14-s1:*:*:*:preview:*:*:*", "vulnerable": true, "matchCriteriaId": "FB597385-BCFD-4CDB-9328-B4F76D586E4D"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.19-s1:*:*:*:preview:*:*:*", "vulnerable": true, "matchCriteriaId": "42C76CEF-FD0B-40A4-B246-A71F3EC72B29"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.21:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "5CC1F26C-4757-4C87-BD8B-2FA456A88C6F"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.27:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "582A4948-B64F-45D4-807A-846A85BB6B42"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.29:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "F22E7F6A-0714-480D-ACDF-5027FD6697B2"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.35:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "255AEB06-F071-4433-93E5-9436086C1A6D"}, {"criteria": "cpe:2.3:a:isc:bind:9.11.37:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "EF14D712-5FCF-492F-BE3E-745109E9D6E5"}, {"criteria": "cpe:2.3:a:isc:bind:9.16.8:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "288EAD80-574B-4839-9C2C-81D6D088A733"}, {"criteria": "cpe:2.3:a:isc:bind:9.16.11:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "3595F024-F910-4356-8B5B-D478960FF574"}, {"criteria": "cpe:2.3:a:isc:bind:9.16.13:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "94661BA2-27F8-4FFE-B844-9404F735579D"}, {"criteria": "cpe:2.3:a:isc:bind:9.16.21:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "751E37C2-8BFD-4306-95C1-8C01CE495FA4"}, {"criteria": "cpe:2.3:a:isc:bind:9.16.32:s1:*:*:supported_preview:*:*:*", "vulnerable": true, "matchCriteriaId": "CC432820-F1A2-4132-A673-2620119553C5"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"}, {"criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5C675112-476C-4D7C-BCB9-A2FB2D0BC9FD"}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E30D0E6F-4AE8-4284-8716-991DFA48CC5D"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*", "vulnerable": true, "matchCriteriaId": "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"}], "operator": "OR"}]}], "sourceIdentifier": "security-officer@isc.org"}

7.5 /10