{"schemaVersion":3,"id":"MGASA-2022-0388","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Updated bind packages fix security vulnerability\n\nBy flooding the target resolver with queries exploiting this flaw an\nattacker can significantly impair the resolver's performance,\neffectively denying legitimate clients access to the DNS resolution\nservice. (CVE-2022-2795)\n\nBy spoofing the target resolver with responses that have a malformed ECDSA\nsignature, an attacker can trigger a small memory leak. It is possible to\ngradually erode available memory to the point where named crashes for lack\nof resources. (CVE-2022-38177, CVE-2022-38178)","dates":{"published":"2022-10-23T22:48:35.000Z","modified":"2026-04-16T04:42:50.258Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"mageia","product":"bind","name":"bind","label":"bind","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/bind","purlType":"rpm","versions":[{"text":"< 9.11.37-1.1.mga8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.11.37-1.1.mga8","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://advisories.mageia.org/MGASA-2022-0388.html","label":"advisories.mageia.org/MGASA-2022-0388.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30877","label":"bugs.mageia.org/show_bug.cgi?id=30877","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://kb.isc.org/docs/cve-2022-2795","label":"kb.isc.org/docs/cve-2022-2795","hostname":"kb.isc.org","tags":["WEB"]},{"url":"https://kb.isc.org/docs/cve-2022-38177","label":"kb.isc.org/docs/cve-2022-38177","hostname":"kb.isc.org","tags":["WEB"]},{"url":"https://kb.isc.org/docs/cve-2022-38178","label":"kb.isc.org/docs/cve-2022-38178","hostname":"kb.isc.org","tags":["WEB"]},{"url":"https://ubuntu.com/security/notices/USN-5626-1","label":"ubuntu.com/security/notices/USN-5626-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.debian.org/lts/security/2022/dla-3138","label":"www.debian.org/lts/security/2022/dla-3138","hostname":"www.debian.org","tags":["WEB"]}],"lineage":{"upstream":["CVE-2022-2795","CVE-2022-38177","CVE-2022-38178"],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2022-10-23T22:48:35.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-16T04:42:50.258Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T09:52:41.730Z","stale":false,"partial":false}}