Vulnerability Description
On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-on statements in their named.conf. TLS is used by both DNS over TLS (DoT) and DNS over HTTPS (DoH), but configurations using DoT alone are unaffected. Affects BIND 9.18.0 -> 9.18.2 and version 9.19.0 of the BIND 9.19 development branch.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Isc | Bind | >= 9.18.0, <= 9.18.2 |
| Netapp | H410C Firmware | - |
| Netapp | H410C | - |
| Netapp | H300S Firmware | - |
| Netapp | H300S | - |
| Netapp | H500S Firmware | - |
| Netapp | H500S | - |
| Netapp | H700S Firmware | - |
| Netapp | H700S | - |
| Netapp | H410S Firmware | - |
| Netapp | H410S | - |
Related Weaknesses (CWE)
References
- https://kb.isc.org/docs/cve-2022-1183Vendor Advisory
- https://security.netapp.com/advisory/ntap-20220707-0002/Third Party Advisory
- https://kb.isc.org/docs/cve-2022-1183Vendor Advisory
- https://security.netapp.com/advisory/ntap-20220707-0002/Third Party Advisory
FAQ
What is CVE-2022-1183?
CVE-2022-1183 is a vulnerability with a CVSS score of 7.5 (HIGH). On vulnerable configurations, the named daemon may, in some circumstances, terminate with an assertion failure. Vulnerable configurations are those that include a reference to http within the listen-o...
How severe is CVE-2022-1183?
CVE-2022-1183 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-1183?
Check the references section above for vendor advisories and patch information. Affected products include: Isc Bind, Netapp H410C Firmware, Netapp H410C, Netapp H300S Firmware, Netapp H300S.