[Git][security-tracker-team/security-tracker][master] CVE-2022-2881/bind9 n/a on buster
Emilio Pozuelo Monfort (@pochu)
pochu at debian.org
Tue Oct 4 09:30:44 BST 2022
Emilio Pozuelo Monfort pushed to branch master at Debian Security Tracker / security-tracker
Commits:
dd97be51 by Emilio Pozuelo Monfort at 2022-10-04T10:30:07+02:00
CVE-2022-2881/bind9 n/a on buster
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -9898,6 +9898,7 @@ CVE-2022-2882
CVE-2022-2881 (The underlying bug might cause read past end of the buffer and either ...)
- bind9 1:9.18.7-1
[bullseye] - bind9 <ignored> (Flawed code present in 9.16 but masked by the way the httpd objects are reset between messages)
+ [buster] - bind9 <not-affected> (Vulnerable code introduced later)
NOTE: https://kb.isc.org/docs/cve-2022-2881
NOTE: Exposed after (but not only requirement): https://gitlab.isc.org/isc-projects/bind9/-/commit/69c1ee1ce9f801aaa082bb3abf5969b46699f70a (v9_17_4)
NOTE: Fixed by: https://gitlab.isc.org/isc-projects/bind9/-/commit/13333db69f9b9710a98c86f44276e01e95420fa0 (v9_18_7)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd97be516dc0ff14283afce87d67ee27487809b6
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dd97be516dc0ff14283afce87d67ee27487809b6
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20221004/ccee5621/attachment.htm>
More information about the debian-security-tracker-commits
mailing list