FortiClient VulnerabilityISC BIND 9 CVE-2022-3488 Input Validation Bypass Vulnerability
Description
An attacker controlling a malicious nameserver could respond with two responses in quick succession, each with a 'CLIENT-SUBNET' pseudo-option and where the first is broken. Processing the second response after the first causes named to terminate.
Affected Applications
ISC BIND 9
Telemetry
CVE References
CVE-2022-3488Other References
https://kb.isc.org/v1/docs/aa-00913| ID | 4744 |
| Created | Jan 27, 2023 |
| Description Updated |
Nov 09, 2023 |
| Risk |
|
| Coverage | FortiClient |
| OS | Linux |
| Vendor | ISC |
| Patch | manual |
| Application | ISC BIND 9 |