[Git][security-tracker-team/security-tracker][master] CVE-2022-2881/bind9 n/a on buster

Emilio Pozuelo Monfort (@pochu) pochu at debian.org
Tue Oct 4 09:30:44 BST 2022



Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker


Commits:
dd97be51 by Emilio Pozuelo Monfort at 2022-10-04T10:30:07+02:00
CVE-2022-2881/bind9 n/a on buster

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -9898,6 +9898,7 @@ CVE-2022-2882
 CVE-2022-2881 (The underlying bug might cause read past end of the buffer and either  ...)
 	- bind9 1:9.18.7-1
 	[bullseye] - bind9 <ignored> (Flawed code present in 9.16 but masked by the way the httpd objects are reset between messages)
+	[buster] - bind9 <not-affected> (Vulnerable code introduced later)
 	NOTE: https://kb.isc.org/docs/cve-2022-2881
 	NOTE: Exposed after (but not only requirement): https://gitlab.isc.org/isc-projects/bind9/-/commit/69c1ee1ce9f801aaa082bb3abf5969b46699f70a (v9_17_4)
 	NOTE: Fixed by: https://gitlab.isc.org/isc-projects/bind9/-/commit/13333db69f9b9710a98c86f44276e01e95420fa0 (v9_18_7)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd97be516dc0ff14283afce87d67ee27487809b6

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd97be516dc0ff14283afce87d67ee27487809b6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221004/ccee5621/attachment.htm>


More information about the debian-security-tracker-commits mailing list