CVE-2022-0396

EPSS 2.7%
Veröffentlicht 23.03.2022 11:15:08
Zuletzt bearbeitet 21.11.2024 06:38:32
Erkennungen
Login

DoS from specifically crafted TCP packets

BIND 9.16.11 -> 9.16.26, 9.17.0 -> 9.18.0 and versions 9.16.11-S1 -> 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 1 Referenzen 8

NVD 17 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Isc ≫ Bind SwEdition - Version >= 9.16.11 < 9.16.27

Isc ≫ Bind SwEdition supported_preview Version >= 9.16.11 < 9.16.27

Isc ≫ Bind Version >= 9.17.0 <= 9.18.0

Fedoraproject ≫ Fedora Version 34

Fedoraproject ≫ Fedora Version 35

Fedoraproject ≫ Fedora Version 36

Netapp ≫ H300s Firmware Version -

Netapp ≫ H300s Version -

Netapp ≫ H500s Firmware Version -

Netapp ≫ H500s Version -

Netapp ≫ H700s Firmware Version -

Netapp ≫ H700s Version -

Netapp ≫ H300e Firmware Version -

Netapp ≫ H300e Version -

Netapp ≫ H500e Firmware Version -

Netapp ≫ H500e Version -

Netapp ≫ H700e Firmware Version -

Netapp ≫ H700e Version -

Netapp ≫ H410s Firmware Version -

Netapp ≫ H410s Version -

Netapp ≫ H410c Firmware Version -

Netapp ≫ H410c Version -

Siemens ≫ Sinec Ins Version < 1.0

Siemens ≫ Sinec Ins Version 1.0 Update -

Siemens ≫ Sinec Ins Version 1.0 Update sp1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.7%	0.844

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P
ISC	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L