Critical Exit Vulnerability in BIND9 Package - CVE-2022-0667
Summary
UBUNTU-CVE-2022-0667: When the vulnerability is triggered the BIND process will exit. BIND 9.18.0. Affects bind9 versions < 1:9.18.0-2ubuntu3. Fixed in 1:9.18.0-2ubuntu3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
BIND9 is a widely used DNS server software that provides name resolution services for various applications and systems. It is known for its robustness and flexibility, supporting a range of DNS features. However, it is susceptible to vulnerabilities that can lead to service disruptions, such as the one identified in CVE-2022-0667, which affects version 1:9.18.0-2ubuntu3.
Vulnerability Detail
CVE-2022-0667 is a vulnerability in the BIND9 package that causes the BIND process to exit unexpectedly when triggered. This can lead to service outages and affect applications relying on DNS resolution. The vulnerability is classified with a CVSS score of 7.5, indicating a high severity level. The issue originates from flaws in the handling of certain DNS queries, which can exploit the BIND process's stability.
How To Fix
Minimum fixed version
1:9.18.0-2ubuntu3
This is the first release that contains the fix.
sudo apt-get install --only-upgrade bind9Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you may consider implementing rate limiting on DNS queries or using a different DNS server to mitigate the impact of this vulnerability until a patch is applied.
Conclusion
CVE-2022-0667 is a significant vulnerability in the BIND9 package that can lead to unexpected service interruptions. It is crucial to update to the patched version to ensure the stability and security of your DNS services. Utilizing tools like Vulert can help monitor and alert for such vulnerabilities in real-time.
See every vulnerability recorded for bind9 →
FAQ
CVE-2022-0667 is a vulnerability in the BIND9 DNS server that causes the process to exit unexpectedly, potentially leading to service disruptions.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for CVE-2022-0667 is 7.5, indicating a high level of severity.
If you cannot update the package right away, consider implementing rate limiting on DNS queries or switching to an alternative DNS server as a temporary measure.
You can find more information about BIND9 vulnerabilities and updates on the official BIND website or through security advisories from your operating system's vendor.
References
Related vulnerabilities
Recent vulnerabilities recorded for bind9.
