VULNERABILITY INTELLIGENCE
CVE-2022-2906
CVSS score7.5 HIGH
EPSS probability2.05%
CISA KEVNot currently listed
Published2022-09-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.
Weakness classification
- CWE-401: Missing Release of Memory after Effective Lifetime
Primary references
- security-officer@isc.org — Mailing List, Patch, Third Party Advisory
- security-officer@isc.org — Patch, Vendor Advisory
- security-officer@isc.org — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory