CVE catalog

CVE-2022-3094

bind9: CVE-2022-3094

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
13.21% · Oct 25, 2026

A flaw was found in Bind, where sending a flood of dynamic DNS updates may cause named to allocate large amounts of memory. This issue may cause named to slow down due to a lack of free memory, resulting in a denial of service (DoS). bind: flooding with UPDATE requests may lead to DoS Exploitation of this vulnerability is limited to trusted clients who are permitted to make dynamic zone changes. The impact on the 'named' service is directly related to the volume of requests being sent in. The service will recover to normal once an attacker stops sending dynamic updates. While a performance impact can be triggered, it is unlikely to result in a crash. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianbind9sid1:9.20.30-1fixed
Debianbind9forky1:9.20.30-1fixed
Debianbind9trixie1:9.20.26-1~deb13u1fixed
Debianbind9trixie-security1:9.20.30-1~deb13u1fixed
Debianbind9bookworm1:9.18.49-1~deb12u1fixed
Debianbind9bookworm-security1:9.18.49-1~deb12u3fixed
Susebindmulti linux manager tools sle-micro-59.16.6-150000.12.91.1fixed
Susebindmanager client tools for sle micro 59.16.6-150000.12.91.1fixed
Ubuntubind920.041:9.11.5.P4+dfsg-5.1ubuntu2vulnerable
Ubuntubind920.041:9.11.5.P4+dfsg-5.1ubuntu3vulnerable
Ubuntubind920.041:9.11.5.P4+dfsg-5.1ubuntu4vulnerable
Ubuntubind920.041:9.11.5.P4+dfsg-5.1ubuntu5vulnerable
Ubuntubind920.041:9.11.14+dfsg-1ubuntu1vulnerable
Ubuntubind920.041:9.11.14+dfsg-3ubuntu1vulnerable
Ubuntubind920.041:9.16.0-1ubuntu3vulnerable
Ubuntubind920.041:9.16.0-1ubuntu4vulnerable
Ubuntubind920.041:9.16.0-1ubuntu5vulnerable
Ubuntubind920.041:9.16.1-0ubuntu1vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.1vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.2vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.3vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.4vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.6vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.7vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.8vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.9vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.10vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.11vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.12fixed
Ubuntubind922.041:9.16.15-1ubuntu1vulnerable
Ubuntubind922.041:9.16.15-1ubuntu2vulnerable
Ubuntubind922.041:9.16.15-1ubuntu3vulnerable
Ubuntubind922.041:9.18.0-2ubuntu1vulnerable
Ubuntubind922.041:9.18.0-2ubuntu2vulnerable
Ubuntubind922.041:9.18.0-2ubuntu3vulnerable
Ubuntubind922.041:9.18.1-1ubuntu1vulnerable
Ubuntubind922.041:9.18.1-1ubuntu1.1vulnerable
Ubuntubind922.041:9.18.1-1ubuntu1.2vulnerable
Ubuntubind922.041:9.18.1-1ubuntu1.3fixed
Ubuntubind920.041:9.11.5.P4+dfsg-5.1ubuntu2vulnerable
Ubuntubind920.041:9.11.5.P4+dfsg-5.1ubuntu3vulnerable
Ubuntubind920.041:9.11.5.P4+dfsg-5.1ubuntu4vulnerable
Ubuntubind920.041:9.11.5.P4+dfsg-5.1ubuntu5vulnerable
Ubuntubind920.041:9.11.14+dfsg-1ubuntu1vulnerable
Ubuntubind920.041:9.11.14+dfsg-3ubuntu1vulnerable
Ubuntubind920.041:9.16.0-1ubuntu3vulnerable
Ubuntubind920.041:9.16.0-1ubuntu4vulnerable
Ubuntubind920.041:9.16.0-1ubuntu5vulnerable
Ubuntubind920.041:9.16.1-0ubuntu1vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.1vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.2vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.3vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.4vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.6vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.7vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.8vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.9vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.10vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.11vulnerable
Ubuntubind920.041:9.16.1-0ubuntu2.12fixed
Ubuntubind922.041:9.16.15-1ubuntu1vulnerable
Ubuntubind922.041:9.16.15-1ubuntu2vulnerable
Ubuntubind922.041:9.16.15-1ubuntu3vulnerable
Ubuntubind922.041:9.18.0-2ubuntu1vulnerable
Ubuntubind922.041:9.18.0-2ubuntu2vulnerable
Ubuntubind922.041:9.18.0-2ubuntu3vulnerable
Ubuntubind922.041:9.18.1-1ubuntu1vulnerable
Ubuntubind922.041:9.18.1-1ubuntu1.1vulnerable
Ubuntubind922.041:9.18.1-1ubuntu1.2vulnerable
Ubuntubind922.041:9.18.1-1ubuntu1.3fixed
Susebindlinux enterprise module for basesystem 15 sp49.16.37-150400.5.17.1fixed
Susebindlinux enterprise module for server applications 15 sp49.16.37-150400.5.17.1fixed
Opensusebindleap 15.49.16.37-150400.5.17.1fixed
Susebindlinux enterprise module for basesystem 15 sp49.16.6-150300.22.27.1fixed
Susebindlinux enterprise high performance computing 15 sp3-espos9.16.6-150300.22.27.1fixed
Susebindlinux enterprise high performance computing 15 sp3-ltss9.16.6-150300.22.27.1fixed
Susebindlinux enterprise real time 15 sp39.16.6-150300.22.27.1fixed
Susebindlinux enterprise server 15 sp3-ltss9.16.6-150300.22.27.1fixed
Susebindlinux enterprise server for sap applications 15 sp39.16.6-150300.22.27.1fixed
Susebindmanager proxy 4.29.16.6-150300.22.27.1fixed
Susebindmanager retail branch server 4.29.16.6-150300.22.27.1fixed
Susebindmanager server 4.29.16.6-150300.22.27.1fixed
Susebindenterprise storage 7.19.16.6-150300.22.27.1fixed
Opensusebindleap 15.49.16.6-150300.22.27.1fixed
Opensusebindtumbleweed9.18.11-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianbind9sourcesid1:9.18.11-1not yet assignedNot reportedNot reported
Debianbind9sourceforky1:9.18.11-1not yet assignedNot reportedNot reported
Debianbind9sourcetrixie1:9.18.11-1not yet assignedNot reportedNot reported
Debianbind9sourcebookworm1:9.18.11-1not yet assignedNot reportedNot reported
Susebindrpmmulti linux manager tools sle-micro-59.16.6-150000.12.91.1Not reportedSUSE-SU-2026:3517-1Not reported
Susebindrpmmanager client tools for sle micro 59.16.6-150000.12.91.1Not reportedSUSE-SU-2026:3517-1Not reported
Ubuntubind9deb20.041:9.16.1-0ubuntu2.12Not reportedUBUNTU-CVE-2022-3094Not reported
Ubuntubind9deb22.041:9.18.1-1ubuntu1.3Not reportedUBUNTU-CVE-2022-3094Not reported
Ubuntubind9deb20.041:9.16.1-0ubuntu2.12Not reportedUSN-5827-1Not reported
Ubuntubind9deb22.041:9.18.1-1ubuntu1.3Not reportedUSN-5827-1Not reported
Susebindrpmlinux enterprise module for basesystem 15 sp49.16.37-150400.5.17.1Not reportedSUSE-SU-2023:0341-1Not reported
Susebindrpmlinux enterprise module for server applications 15 sp49.16.37-150400.5.17.1Not reportedSUSE-SU-2023:0341-1Not reported
Opensusebindrpmleap 15.49.16.37-150400.5.17.1Not reportedSUSE-SU-2023:0341-1Not reported
Susebindrpmlinux enterprise module for basesystem 15 sp49.16.6-150300.22.27.1Not reportedSUSE-SU-2023:0427-1Not reported
Susebindrpmlinux enterprise high performance computing 15 sp3-espos9.16.6-150300.22.27.1Not reportedSUSE-SU-2023:0427-1Not reported
Susebindrpmlinux enterprise high performance computing 15 sp3-ltss9.16.6-150300.22.27.1Not reportedSUSE-SU-2023:0427-1Not reported
Susebindrpmlinux enterprise real time 15 sp39.16.6-150300.22.27.1Not reportedSUSE-SU-2023:0427-1Not reported
Susebindrpmlinux enterprise server 15 sp3-ltss9.16.6-150300.22.27.1Not reportedSUSE-SU-2023:0427-1Not reported
Susebindrpmlinux enterprise server for sap applications 15 sp39.16.6-150300.22.27.1Not reportedSUSE-SU-2023:0427-1Not reported
Susebindrpmmanager proxy 4.29.16.6-150300.22.27.1Not reportedSUSE-SU-2023:0427-1Not reported
Susebindrpmmanager retail branch server 4.29.16.6-150300.22.27.1Not reportedSUSE-SU-2023:0427-1Not reported
Susebindrpmmanager server 4.29.16.6-150300.22.27.1Not reportedSUSE-SU-2023:0427-1Not reported
Susebindrpmenterprise storage 7.19.16.6-150300.22.27.1Not reportedSUSE-SU-2023:0427-1Not reported
Opensusebindrpmleap 15.49.16.6-150300.22.27.1Not reportedSUSE-SU-2023:0427-1Not reported
Opensusebindrpmtumbleweed9.18.11-1.1Not reportedOPENSUSE-SU-2024:12641-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [bind9]Unknown
    Details (6)
    • 1:9.18.49-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.20.23-1~deb13u1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.20.23-1~deb13u1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

  • [bind9-dev]Unknown

    Source package: [bind9]

    Details (6)
    • 1:9.18.49-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.20.23-1~deb13u1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.20.23-1~deb13u1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

  • Source package: [bind9]

    Details (6)
    • 1:9.18.49-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.20.23-1~deb13u1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.20.23-1~deb13u1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

  • [bind9-doc]Unknown

    Source package: [bind9]

    Details (6)
    • 1:9.18.49-1~deb12u1 · all · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u1 · all · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.20.23-1~deb13u1~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.20.23-1~deb13u1~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

  • [bind9-host]Unknown

    Source package: [bind9]

    Details (6)
    • 1:9.18.49-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.20.23-1~deb13u1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.20.23-1~deb13u1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

  • [bind9-libs]Unknown

    Source package: [bind9]

    Details (6)
    • 1:9.18.49-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.20.23-1~deb13u1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.20.23-1~deb13u1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

  • [bind9-utils]Unknown

    Source package: [bind9]

    Details (6)
    • 1:9.18.49-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.20.23-1~deb13u1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.20.23-1~deb13u1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

  • [bind9utils]Unknown

    Source package: [bind9]

    Details (4)
    • 1:9.18.49-1~deb12u1 · all · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u1 · all · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

  • [dnsutils]Unknown

    Source package: [bind9]

    Details (4)
    • 1:9.18.49-1~deb12u1 · all · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u1 · all · bookworm

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

    • 1:9.18.49-1~deb12u2 · all · bookworm-security

      Fixed · Fixed: 1:9.18.11-1

      dsa · bind9 · debian · bookworm

[openSUSE Tumbleweed]

  • [bind]Unknown

    Source package: [bind]

    Details (1)
    • 9.20.26-1.2 · x86_64 · tumbleweed

      Fixed · Fixed: 9.18.11-1.1

      dsa · bind · opensuse · tumbleweed

  • [bind-doc]Unknown

    Source package: [bind]

    Details (1)
    • 9.20.26-1.2 · noarch · tumbleweed

      Unknown · Fixed: 9.18.11-1.1

      Version impact unknown

      dsa · bind · opensuse · tumbleweed

  • Source package: [bind]

    Details (1)
    • 9.20.26-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 9.18.11-1.1

      Version impact unknown

      dsa · bind · opensuse · tumbleweed

  • Source package: [bind]

    Details (1)
    • 9.20.26-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 9.18.11-1.1

      Version impact unknown

      dsa · bind · opensuse · tumbleweed

  • Source package: [bind]

    Details (1)
    • 9.20.26-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 9.18.11-1.1

      Version impact unknown

      dsa · bind · opensuse · tumbleweed

  • Source package: [bind]

    Details (1)
    • 9.20.26-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 9.18.11-1.1

      Version impact unknown

      dsa · bind · opensuse · tumbleweed

  • Source package: [bind]

    Details (1)
    • 9.20.26-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 9.18.11-1.1

      Version impact unknown

      dsa · bind · opensuse · tumbleweed

  • Source package: [bind]

    Details (1)
    • 9.20.26-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 9.18.11-1.1

      Version impact unknown

      dsa · bind · opensuse · tumbleweed

  • [bind-utils]Unknown

    Source package: [bind]

    Details (1)
    • 9.20.26-1.2 · x86_64 · tumbleweed

      Unknown · Fixed: 9.18.11-1.1

      Version impact unknown

      dsa · bind · opensuse · tumbleweed

Observed:

References