PT-2022-4860
CVE-2022-2881
·
تاريخ النشر
2022-09-21
·
تاريخ التحديث
2026-08-20
الوصف من
CVSS 2.0
8.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:C
Name of the Vulnerable Software and Affected Versions
BIND versions (affected versions not specified)
Description
The issue is related to a buffer overflow bug that can cause the process to read past the end of the buffer, potentially allowing an attacker to read memory that should not be accessible or crash the process. This can be exploited by a remote attacker to gain access to protected information or cause a denial of service. The vulnerability is also associated with boundary conditions when reusing an HTTP connection to request statistics from a statistics channel, which can lead to a read beyond bounds error or a denial of service attack.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾