Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.2

Bind9 on Debian 11 could let attackers take control

CVE-2022-2881 · published 4 years ago
Summary

The Bind9 DNS server used in Debian 11 has a flaw that could allow a remote attacker to execute code with full system privileges. This could let them gain complete control over the server and any data it handles. Updating to the latest Bind9 packages provided by the vendor fixes the issue, so apply the updates as soon as possible.

What to do
  • Update debian bind9 to version 1:9.18.7-1.
  • Update debian bind9 to version 1:9.16.50-1~deb11u6.aikido.8.
  • Update debian rootio-bind9 to version 1:9.16.50-1~deb11u6.aikido.8.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian bind9 < 1:9.18.7-1
Fix: upgrade to 1:9.18.7-1
Debian:13 debian bind9 < 1:9.18.7-1
Fix: upgrade to 1:9.18.7-1
Debian:14 debian bind9 < 1:9.18.7-1
Fix: upgrade to 1:9.18.7-1
Root:Debian:11 debian bind9 < 1:9.16.50-1~deb11u6.aikido.8
Fix: upgrade to 1:9.16.50-1~deb11u6.aikido.8
Root:Debian:11 debian rootio-bind9 < 1:9.16.50-1~deb11u6.aikido.8
Fix: upgrade to 1:9.16.50-1~deb11u6.aikido.8
– isc bind >= 9.18.0, < 9.18.7
>= 9.19.0, < 9.19.5
cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*
Original advisory text
The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process.
The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
8.2 High
Exploitation
1% chance of attack within 30 days
Type
CWE-125Out-of-bounds Read
Timeline
Published21 Sep 2022
Updated31 Oct 2026
First seen21 Aug 2026
Sources
ROOT-OS-DEBIAN-11-CVE-2022-2881 · OSV
CVE-2022-2881 · NVD
DEBIAN-CVE-2022-2881 · OSV
Track software like this
Free during beta