CVE-2022-38178 Memory leaks in EdDSA DNSSEC verification code
An attacker can cause a denial of service in BIND9 by sending malformed EdDSA signatures that trigger memory leaks, eventually crashing the server.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-38178?
CVE-2022-38178 is a high-severity memory corruption vulnerability in Debian Debian Linux, published on 21 Sep 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode available memory to the point where named crashes for lack of resources.
Weakness: CWE-401
Which versions are affected by CVE-2022-38178?
It affects 4 products.
Products include Debian Debian Linux, Fedoraproject Fedora, Isc Bind, Netapp Active Iq Unified Manager.
How do I fix CVE-2022-38178?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-38178 being exploited?
There is no known exploitation of CVE-2022-38178 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALPINE-CVE-2022-38178, AZL-11002, AZL-39989, DEBIAN-CVE-2022-38178, GHSA-349w-cgp3-287r, UBUNTU-CVE-2022-38178.