CVE-2022-3736

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

BIND 9 resolver can crash when stale cache and stale answers are enabled, option `stale-answer-client-timeout` is set to a positive integer, and the resolver receives an RRSIG query. This issue affects BIND 9 versions 9.16.12 through 9.16.36, 9.18.0 through 9.18.10, 9.19.0 through 9.19.8, and 9.16.12-S1 through 9.16.36-S1.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
ISCBIND 9>= 9.16.12, <= 9.16.36; >= 9.18.0, <= 9.18.10; >= 9.19.0, <= 9.19.8; >= 9.16.12-S1, <= 9.16.36-S1

References

Timeline

Published
Jan 26, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-373605.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interactiCVE-2022-373615.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interactiCVE-2022-373627.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-373637.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-373647.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-373657.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-373667.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-373677.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-373685.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interactiCVE-2022-373697.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is reCVE-2022-37377.8In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 memory can be read beyond the intended scope due to insufficient validatCVE-2022-373705.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interacti
CVE-2022-3736: High severity, CVSS 7.5 | Vulnix