Security Vulnerabilities fixed in BIND AA-00913

Description

By flooding the target server with UPDATE requests, the attacker can exhaust all available memory on that server. By sending specific queries to the resolver, an attacker can cause named to crash.

Affected Applications

ISC BIND 9

CVE References

CVE-2022-3094 CVE-2022-3736 CVE-2022-3924

Other References

https://kb.isc.org/v1/docs/aa-00913