CVE-2022-3488
published 2023-01-26CVE-2022-3488: Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND…
PriorityP351high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
19.19%
97.1th percentile
Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure.
'Broken' in this context is anything that would cause the resolver to reject the query response, such as a mismatch between query and answer name.
This issue affects BIND 9 versions 9.11.4-S1 through 9.11.37-S1 and 9.16.8-S1 through 9.16.36-S1.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | bind9 | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind | — | — |
| isc | bind_9 | 9.11.4-S1 – 9.11.37-S1 | — |
| isc | bind_9 | 9.16.8-S1 – 9.16.36-S1 | — |
| matrix-org | matrix-js-sdk | >= 17.1.0-rc.1 < 19.7.0 | 19.7.0 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_debian7.5LOW
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
bind: processing specially crafted responses in quick succession may lead to assertion failure
vendor_redhat·2023-01-25·CVSS 7.5
CVE-2022-3488 [HIGH] CWE-20 bind: processing specially crafted responses in quick succession may lead to assertion failure
bind: processing specially crafted responses in quick succession may lead to assertion failure
Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure.
'Broken' in this context is anything that would cause the resolver to reject the query response, such as a mismatch between query and answer name.
This issue affects BIND 9 versions 9.11.4-S1 through 9.11.37-S1 and 9.16.8-S1 through 9.16.36-S1.
Statement: This issue only affects the special feature preview branch of bind. Bind packages shipped with Red Hat Enterprise Linux are not affected by this flaw.
Package: bind (Red Hat Enterprise Linux 6) - Not affected
Package: bind (Red Hat Enterprise Linux 7)
Debian
CVE-2022-3488: bind9 - Processing of repeated responses to the same query, where both responses contain...
vendor_debian·2022·CVSS 7.5
CVE-2022-3488 [HIGH] CVE-2022-3488: bind9 - Processing of repeated responses to the same query, where both responses contain...
Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure. 'Broken' in this context is anything that would cause the resolver to reject the query response, such as a mismatch between query and answer name. This issue affects BIND 9 versions 9.11.4-S1 through 9.11.37-S1 and 9.16.8-S1 through 9.16.36-S1.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
GHSA
GHSA-pq6j-95q4-4mhj: Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can ca
ghsa_unreviewed·2023-01-26
CVE-2022-3488 [HIGH] CWE-617 GHSA-pq6j-95q4-4mhj: Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can ca
Processing of repeated responses to the same query, where both responses contain ECS pseudo-options, but where the first is broken in some way, can cause BIND to exit with an assertion failure. 'Broken' in this context is anything that would cause the resolver to reject the query response, such as a mismatch between query and answer name. This issue affects BIND 9 versions 9.11.4-S1 through 9.11.37-S1 and 9.16.8-S1 through 9.16.36-S1.
GHSA
Improper beacon events in matrix-js-sdk can result in availability issues
ghsa·2022-09-29
CVE-2022-39236 [MEDIUM] CWE-20 Improper beacon events in matrix-js-sdk can result in availability issues
Improper beacon events in matrix-js-sdk can result in availability issues
### Impact
Improperly formed beacon events (from [MSC3488](https://github.com/matrix-org/matrix-spec-proposals/pull/3488)) can disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data safely. Note that the matrix-js-sdk can appear to be operating normally but be excluding or corrupting runtime data presented to the consumer.
### Patches
This is patched in matrix-js-sdk v19.7.0
### Workarounds
Redacting applicable events, waiting for the sync processor to store data, and restarting the client can often fix it. Alternatively, redacting the applicable events and clearing all storage will fix the further perceived issues.
Downgrading to an unaffected
No detection rules found.
No public exploits indexed.
2023-01-26
Published