CVE-2022-2795
Medium
Published: 21 September 2022
Published
21 September 2022
Modified
29 November 2024
KEV Added
—
Patch
21 September 2022
CVSS Score v3.1
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.0036
58.8th percentile
Risk Priority
11
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2022-2795 is a medium-severity an unspecified weakness vulnerability in Isc Bind. Its CVSS base score is 5.3 (Medium).
Operationally, ranked in the top 41.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-35036
Vulnerability details
By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
isc
bind
9.10.5, 9.10.7, 9.11.12, 9.11.14-s1, 9.11.19-s1 · 9.0.0 — 9.16.33 · 9.18.0 — 9.18.7 · 9.19.0 — 9.19.5
debian
debian linux
10.0, 11.0
fedoraproject
fedora
35, 36, 37
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.