CVE-2022-2906

high

Description

An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.

References

https://security.gentoo.org/glsa/202210-25

https://kb.isc.org/docs/cve-2022-2906

http://www.openwall.com/lists/oss-security/2022/09/21/3

Details

Source: Mitre, NVD

Published: 2022-09-21

Updated: 2022-12-03

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High