CVE-2022-3488

Name of the Vulnerable Software and Affected Versions BIND 9 versions 9.11.4-S1 through 9.11.37-S1 BIND 9 versions 9.16.8-S1 through 9.16.36-S1

Description The issue arises when processing repeated responses to the same query, where both responses contain ECS pseudo-options, but the first response is broken. A 'broken' response refers to anything that would cause the resolver to reject the query response, such as a mismatch between the query and answer name. This can cause the software to exit with an assertion failure.

Recommendations For BIND 9 versions 9.11.4-S1 through 9.11.37-S1, update to a version outside of this range to resolve the issue. For BIND 9 versions 9.16.8-S1 through 9.16.36-S1, update to a version outside of this range to resolve the issue.