CVE-2022-2906: ISC BIND

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.

Affected products

• ISC BIND: from 9.18.0, before 9.18.7 (fixed in 9.18.7); from 9.19.0, before 9.19.5 (fixed in 9.19.5)

Published 2022-09-21. Last modified 2026-06-17.