Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 2.1%	CVE-2022-2906ISC BIND9 · In BIND 9.18.0 -> 9.18.6 and versions 9.19.0 -> 9.19.4 of the BIND 9.19 development branch, changes between OpenSSL 1.x and OpenSSL 3.0 expose a flaw in named that causes a small memory leak in key processing when using TKEY records in Diffie-Hellman mode with OpenSSL 3.0.0 and later versions. High7.5EPSS 2.1%2022-09-21CVE Database V5CVE-2022-2906 An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service. EPSS 2.1%Vulnerability ISC	CVE Database V5	2022-09-21
Medium	5.5	EPSS 1.4%	CVE-2022-2881ISC BIND9 · In BIND 9.18.0 -> 9.18.6 and versions 9.19.0 -> 9.19.4 of the BIND 9.19 development branch, when an HTTP connection was reused to request statistics from the stats channel, the content length of successive responses could grow in size past the end of the allocated buffer. Medium5.5EPSS 1.4%2022-09-21CVE Database V5CVE-2022-2881 The underlying bug might cause read past end of the buffer and either read memory it should not read, or crash the process. EPSS 1.4%Vulnerability ISC	CVE Database V5	2022-09-21

Page 1 of 1