CVE-2022-38177

bind: The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols

CVE-2022-38177 is fixed in 63 products on 1 platform, first by bind9 1:9.11.3+dfsg-1ubuntu1.18, released September 20, 2022. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0329
88th percentile

The Berkeley Internet Name Domain (BIND) is an implementation of the Domain Name System (DNS) protocols. BIND includes a DNS server (named); a resolver library (routines for applications to use when interfacing with DNS); and tools for verifying that the DNS server is operating correctly. Security Fix(es): * bind: memory leak in ECDSA DNSSEC verification code (CVE-2022-38177) * bind: memory leaks in EdDSA DNSSEC verification code (CVE-2022-38178) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Where it's fixed

ProductFixed inFixReleased
Linux
bind · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind · RHEL 9 32:9.16.23-1.el9_0.1 RHSA-2022:6763 Oct 3, 2022
bind · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind · almalinux 9 32:9.16.23-1.el9_0.1 ALSA-2022:6763 Oct 3, 2022
bind · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind · ol 9 32:9.16.23-1.el9_0.1 ELSA-2022-6763 Oct 4, 2022
bind · rocky 8 2:9.11.36-3.el8_6.1 RLSA-2022:6778 Oct 4, 2022
bind · rocky 9 2:9.16.23-1.el9_0.1 RLSA-2022:6763 Oct 3, 2022
bind-chroot · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind-chroot · RHEL 9 32:9.16.23-1.el9_0.1 RHSA-2022:6763 Oct 3, 2022
bind-chroot · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind-chroot · almalinux 9 32:9.16.23-1.el9_0.1 ALSA-2022:6763 Oct 3, 2022
bind-chroot · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-chroot · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind-chroot · ol 9 32:9.16.23-1.el9_0.1 ELSA-2022-6763 Oct 4, 2022
bind-debuginfo · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-debugsource · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-devel · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind-devel · RHEL 9 32:9.16.23-1.el9_0.1 RHSA-2022:6763 Oct 3, 2022
bind-devel · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind-devel · almalinux 9 32:9.16.23-1.el9_0.1 ALSA-2022:6763 Oct 3, 2022
bind-devel · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-devel · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind-devel · ol 9 32:9.16.23-1.el9_0.1 ELSA-2022-6763 Oct 4, 2022
bind-dlz-filesystem · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-dlz-filesystem-debuginfo · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-dlz-ldap · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-dlz-ldap-debuginfo · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-dlz-mysql · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-dlz-mysql-debuginfo · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-dlz-sqlite3 · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-dlz-sqlite3-debuginfo · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-dnssec-doc · RHEL 9 32:9.16.23-1.el9_0.1 RHSA-2022:6763 Oct 3, 2022
bind-dnssec-doc · almalinux 9 32:9.16.23-1.el9_0.1 ALSA-2022:6763 Oct 3, 2022
bind-dnssec-doc · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-dnssec-doc · ol 9 32:9.16.23-1.el9_0.1 ELSA-2022-6763 Oct 4, 2022
bind-dnssec-utils · RHEL 9 32:9.16.23-1.el9_0.1 RHSA-2022:6763 Oct 3, 2022
bind-dnssec-utils · almalinux 9 32:9.16.23-1.el9_0.1 ALSA-2022:6763 Oct 3, 2022
bind-dnssec-utils · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-dnssec-utils · ol 9 32:9.16.23-1.el9_0.1 ELSA-2022-6763 Oct 4, 2022
bind-dnssec-utils-debuginfo · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-export-devel · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind-export-devel · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind-export-devel · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind-export-libs · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind-export-libs · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind-export-libs · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind-libs · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind-libs · RHEL 9 32:9.16.23-1.el9_0.1 RHSA-2022:6763 Oct 3, 2022
bind-libs · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind-libs · almalinux 9 32:9.16.23-1.el9_0.1 ALSA-2022:6763 Oct 3, 2022
bind-libs · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-libs · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind-libs · ol 9 32:9.16.23-1.el9_0.1 ELSA-2022-6763 Oct 4, 2022
bind-libs-debuginfo · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-libs-lite · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind-libs-lite · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind-libs-lite · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind-license · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind-license · RHEL 9 32:9.16.23-1.el9_0.1 RHSA-2022:6763 Oct 3, 2022
bind-license · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind-license · almalinux 9 32:9.16.23-1.el9_0.1 ALSA-2022:6763 Oct 3, 2022
bind-license · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-license · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind-license · ol 9 32:9.16.23-1.el9_0.1 ELSA-2022-6763 Oct 4, 2022
bind-lite-devel · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind-lite-devel · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind-lite-devel · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind-pkcs11 · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind-pkcs11 · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind-pkcs11 · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-pkcs11 · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind-pkcs11-debuginfo · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-pkcs11-devel · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind-pkcs11-devel · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind-pkcs11-devel · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-pkcs11-devel · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind-pkcs11-libs · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind-pkcs11-libs · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind-pkcs11-libs · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-pkcs11-libs · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind-pkcs11-libs-debuginfo · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-pkcs11-utils · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind-pkcs11-utils · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind-pkcs11-utils · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-pkcs11-utils · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind-pkcs11-utils-debuginfo · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-sdb · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind-sdb · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind-sdb · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind-sdb-chroot · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind-sdb-chroot · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind-sdb-chroot · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind-utils · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
bind-utils · RHEL 9 32:9.16.23-1.el9_0.1 RHSA-2022:6763 Oct 3, 2022
bind-utils · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
bind-utils · almalinux 9 32:9.16.23-1.el9_0.1 ALSA-2022:6763 Oct 3, 2022
bind-utils · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind-utils · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
bind-utils · ol 9 32:9.16.23-1.el9_0.1 ELSA-2022-6763 Oct 4, 2022
bind-utils-debuginfo · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
bind9 · Debian 12.15 (bookworm) 1:9.17.20-1 DEBIAN-CVE-2022-38177 Sep 21, 2022
bind9 · Debian 13.5 (trixie) 1:9.17.20-1 DEBIAN-CVE-2022-38177 Sep 21, 2022
bind9 · Debian 14 1:9.17.20-1 DEBIAN-CVE-2022-38177 Sep 21, 2022
bind9 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 bind9 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
bind9 · Ubuntu 20.04 LTS (focal) 1:9.16.1-0ubuntu2.11 bind9 1:9.16.1-0ubuntu2.11 Sep 20, 2022
bind9-dnsutils · Ubuntu 20.04 LTS (focal) 1:9.16.1-0ubuntu2.11 bind9-dnsutils 1:9.16.1-0ubuntu2.11 Sep 20, 2022
bind9-host · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 bind9-host 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
bind9-host · Ubuntu 20.04 LTS (focal) 1:9.16.1-0ubuntu2.11 bind9-host 1:9.16.1-0ubuntu2.11 Sep 20, 2022
bind9-libs · Ubuntu 20.04 LTS (focal) 1:9.16.1-0ubuntu2.11 bind9-libs 1:9.16.1-0ubuntu2.11 Sep 20, 2022
bind9-utils · Ubuntu 20.04 LTS (focal) 1:9.16.1-0ubuntu2.11 bind9-utils 1:9.16.1-0ubuntu2.11 Sep 20, 2022
bind9.16 · RHEL 8 32:9.16.23-0.7.el8_6.1 RHSA-2022:6781 Oct 4, 2022
bind9.16 · almalinux 8 32:9.16.23-0.7.el8_6.1 ALSA-2022:6781 Oct 4, 2022
bind9.16 · ol 8 32:9.16.23-0.7.el8_6.1 ELSA-2022-6781 Oct 5, 2022
bind9.16 · rocky 8 2:9.16.23-0.7.el8_6.1 RLSA-2022:6781 Oct 4, 2022
bind9.16-chroot · RHEL 8 32:9.16.23-0.7.el8_6.1 RHSA-2022:6781 Oct 4, 2022
bind9.16-chroot · almalinux 8 32:9.16.23-0.7.el8_6.1 ALSA-2022:6781 Oct 4, 2022
bind9.16-chroot · ol 8 32:9.16.23-0.7.el8_6.1 ELSA-2022-6781 Oct 5, 2022
bind9.16-devel · RHEL 8 32:9.16.23-0.7.el8_6.1 RHSA-2022:6781 Oct 4, 2022
bind9.16-devel · almalinux 8 32:9.16.23-0.7.el8_6.1 ALSA-2022:6781 Oct 4, 2022
bind9.16-devel · ol 8 32:9.16.23-0.7.el8_6.1 ELSA-2022-6781 Oct 5, 2022
bind9.16-dnssec-utils · RHEL 8 32:9.16.23-0.7.el8_6.1 RHSA-2022:6781 Oct 4, 2022
bind9.16-dnssec-utils · almalinux 8 32:9.16.23-0.7.el8_6.1 ALSA-2022:6781 Oct 4, 2022
bind9.16-dnssec-utils · ol 8 32:9.16.23-0.7.el8_6.1 ELSA-2022-6781 Oct 5, 2022
bind9.16-doc · RHEL 8 32:9.16.23-0.7.el8_6.1 RHSA-2022:6781 Oct 4, 2022
bind9.16-doc · almalinux 8 32:9.16.23-0.7.el8_6.1 ALSA-2022:6781 Oct 4, 2022
bind9.16-doc · ol 8 32:9.16.23-0.7.el8_6.1 ELSA-2022-6781 Oct 5, 2022
bind9.16-libs · RHEL 8 32:9.16.23-0.7.el8_6.1 RHSA-2022:6781 Oct 4, 2022
bind9.16-libs · almalinux 8 32:9.16.23-0.7.el8_6.1 ALSA-2022:6781 Oct 4, 2022
bind9.16-libs · ol 8 32:9.16.23-0.7.el8_6.1 ELSA-2022-6781 Oct 5, 2022
bind9.16-license · RHEL 8 32:9.16.23-0.7.el8_6.1 RHSA-2022:6781 Oct 4, 2022
bind9.16-license · almalinux 8 32:9.16.23-0.7.el8_6.1 ALSA-2022:6781 Oct 4, 2022
bind9.16-license · ol 8 32:9.16.23-0.7.el8_6.1 ELSA-2022-6781 Oct 5, 2022
bind9.16-utils · RHEL 8 32:9.16.23-0.7.el8_6.1 RHSA-2022:6781 Oct 4, 2022
bind9.16-utils · almalinux 8 32:9.16.23-0.7.el8_6.1 ALSA-2022:6781 Oct 4, 2022
bind9.16-utils · ol 8 32:9.16.23-0.7.el8_6.1 ELSA-2022-6781 Oct 5, 2022
bind9utils · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 bind9utils 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
bind9utils · Ubuntu 20.04 LTS (focal) 1:9.16.1-0ubuntu2.11 bind9utils 1:9.16.1-0ubuntu2.11 Sep 20, 2022
dnsutils · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 dnsutils 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
dnsutils · Ubuntu 20.04 LTS (focal) 1:9.16.1-0ubuntu2.11 dnsutils 1:9.16.1-0ubuntu2.11 Sep 20, 2022
libbind9-160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 libbind9-160 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
libdns-export1100 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 libdns-export1100 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
libdns1100 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 libdns1100 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
libirs-export160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 libirs-export160 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
libirs160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 libirs160 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
libisc-export169 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 libisc-export169 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
libisc169 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 libisc169 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
libisccc-export160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 libisccc-export160 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
libisccc160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 libisccc160 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
libisccfg-export160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 libisccfg-export160 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
libisccfg160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 libisccfg160 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
liblwres160 · Ubuntu 18.04.6 LTS (bionic) 1:9.11.3+dfsg-1ubuntu1.18 liblwres160 1:9.11.3+dfsg-1ubuntu1.18 Sep 20, 2022
python3-bind · RHEL 8 32:9.11.36-3.el8_6.1 RHSA-2022:6778 Oct 4, 2022
python3-bind · RHEL 9 32:9.16.23-1.el9_0.1 RHSA-2022:6763 Oct 3, 2022
python3-bind · almalinux 8 32:9.11.36-3.el8_6.1 ALSA-2022:6778 Oct 4, 2022
python3-bind · almalinux 9 32:9.16.23-1.el9_0.1 ALSA-2022:6763 Oct 3, 2022
python3-bind · amzn 2023 32:9.16.38-1.amzn2023 ALAS2023-2023-161 Apr 13, 2023
python3-bind · ol 8 32:9.11.36-3.el8_6.1 ELSA-2022-6778 Oct 5, 2022
python3-bind · ol 9 32:9.16.23-1.el9_0.1 ELSA-2022-6763 Oct 4, 2022
python3-bind9.16 · RHEL 8 32:9.16.23-0.7.el8_6.1 RHSA-2022:6781 Oct 4, 2022
python3-bind9.16 · almalinux 8 32:9.16.23-0.7.el8_6.1 ALSA-2022:6781 Oct 4, 2022
python3-bind9.16 · ol 8 32:9.16.23-0.7.el8_6.1 ELSA-2022-6781 Oct 5, 2022

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.