[Git][security-tracker-team/security-tracker][master] Update status for CVE-2022-2881/bind9

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f5fdd052 by Salvatore Bonaccorso at 2022-09-22T13:47:31+02:00
Update status for CVE-2022-2881/bind9

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -7198,9 +7198,10 @@ CVE-2022-2882
 	RESERVED
 CVE-2022-2881 (The underlying bug might cause read past end of the buffer and either  ...)
 	- bind9 1:9.18.7-1
+	[bullseye] - bind9 <ignored> (Flawed code present in 9.16 but masked by the way the httpd objects are reset between messages)
 	NOTE: https://kb.isc.org/docs/cve-2022-2881
+	NOTE: Exposed after (but not only requirement): https://gitlab.isc.org/isc-projects/bind9/-/commit/69c1ee1ce9f801aaa082bb3abf5969b46699f70a (v9_17_4)
 	NOTE: Fixed by: https://gitlab.isc.org/isc-projects/bind9/-/commit/13333db69f9b9710a98c86f44276e01e95420fa0 (v9_18_7)
-	TODO: check, why this does not affect versions prior to 9.18.
 CVE-2022-2880
 	RESERVED
 CVE-2022-2879



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f5fdd0521810f586aaff5f443e9cb77e8582791a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/f5fdd0521810f586aaff5f443e9cb77e8582791a
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20220922/6c432a8f/attachment.htm>