← Back to browse · API

CVE-2022-3736

Severity
HIGH
CVSS
7.5
EPSS
0.48707
Risk score
47.05
CISA KEV
No
PoC
No
Published
2023-01-25
Modified
2025-04-01
First seen
2026-08-07
Aliases
EUVD-2022-43092, GHSA-5V6F-5GPQ-2628
Products
ISC:BIND 9 9.16.12 ≤9.16.36, ISC:BIND 9 9.16.12-S1 ≤9.16.36-S1, ISC:BIND 9 9.18.0 ≤9.18.10, ISC:BIND 9 9.19.0 ≤9.19.8
Sources
euvd EUVD-2022-43092

Description

BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1.

References