CVE:CVE-2022-38177
CNNVD:CNNVD-202209-1662
ISC BIND是美国ISC公司的一套实现了DNS协议的开源软件。
ISC BIND 9.8.4版本至9.16.32版本存在安全漏洞，该漏洞源于使用格式错误的ECDSA签名，欺骗目标解析程序，导致内存因资源不足而崩溃。
solution:Upgrade isc bind to a higher version than 9.16.32,9.9.3:s1,9.9.12:s1,9.9.13:s1,9.10.5:s1,9.10.7:s1,9.11.3:s1,9.11.5:s3,9.11.5:s5,9.11.5:s6,9.11.6:s1,9.11.7:s1,9.11.8:s1,9.11.12:s1,9.11.14-s1,9.11.19-s1,9.11.21:s1,9.11.27:s1,9.11.29:s1,9.11.35:s1,9.11.37:s1,9.16.8:s1,9.16.11:s1,9.16.13:s1,9.16.21:s1,9.16.32:s1,and avoid the version [9.8.4,9.16.32],9.9.3:s1,9.9.12:s1,9.9.13:s1,9.10.5:s1,9.10.7:s1,9.11.3:s1,9.11.5:s3,9.11.5:s5,9.11.5:s6,9.11.6:s1,9.11.7:s1,9.11.8:s1,9.11.12:s1,9.11.14-s1,9.11.19-s1,9.11.21:s1,9.11.27:s1,9.11.29:s1,9.11.35:s1,9.11.37:s1,9.16.8:s1,9.16.11:s1,9.16.13:s1,9.16.21:s1,9.16.32:s1; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37; Upgrade netapp active_iq_unified_manager to a higher version than -