CVE-2022-0667: Assertion failure on delayed DS lookup
When the vulnerability is triggered the BIND process will exit. BIND 9.18.0
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/bind9to a version that resolves this vulnerability.Fixed in 1:9.18.49-1~deb12u1Fixed in 1:9.18.49-1~deb12u3Fixed in 1:9.20.26-1~deb13u1Fixed in 1:9.20.30-1~deb13u1Fixed in 1:9.20.30-1 - Upgrade
Upgrade
debian/bind9to a version that resolves this vulnerability.Fixed in 1:9.18.1-1 - Upgrade
Upgrade
BINDto a version that resolves this vulnerability.Fixed in 9.18.1
Event History
Frequently Asked Questions
What is CVE-2022-0667?
CVE-2022-0667 is a vulnerability that causes the BIND process to exit unexpectedly when triggered.
How severe is CVE-2022-0667?
CVE-2022-0667 has a severity score of 7.5, which is considered high.
What software is affected by CVE-2022-0667?
The affected software includes BIND 9.18.0 and Netapp Baseboard Management Controller H300s, H500s, H700s, H300e, H500e, H700e, H410s, and H410c firmware.
How can I fix CVE-2022-0667?
To fix CVE-2022-0667, you should update your BIND software to a version that is not affected by the vulnerability.