CVE-2022-2906

high

Description

An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.

References

https://kb.isc.org/docs/cve-2022-2906

http://www.openwall.com/lists/oss-security/2022/09/21/3

https://security.gentoo.org/glsa/202210-25

Details

Source: MITRE

Published: 2022-09-21

Updated: 2022-12-03

Type: CWE-401

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score: 3.6

Exploitability Score: 3.9

Severity: HIGH