Bug 2128598 (CVE-2022-2906)

Summary: CVE-2022-2906 bind: memory leaks in code handling Diffie-Hellman key exchange via TKEY RRs
Product: [Other] Security Response Reporter: Marian Rehak <mrehak>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED NOTABUG QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: aegorenkov.91, anon.amish, dns-sig, jorton, mosvald, mruprich, pavel, pemensik, security-response-team, vonsch, zdohnal
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: bind 9.18.7, bind 9.19.5 Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in the Bind package, where a flaw in ‘named’ can cause a small memory leak in key processing when using TKEY records in Diffie-Hellman mode with OpenSSL 3.0.0 and later versions. This flaw allows an attacker to gradually erode available memory to the point where ‘named’ crashes due to a lack of resources.
 Story Points: ---
Clone Of: Environment:
Last Closed: 2022-09-21 12:55:51 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2128699, 2128700    
Bug Blocks: 2128582    

Description Marian Rehak 2022-09-21 08:35:59 UTC 
Changes between OpenSSL 1.x and OpenSSL 3.0 expose a flaw in named that causes a small memory leak in key processing when using TKEY records in Diffie-Hellman mode with OpenSSL 3.0.0 and later versions. An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.
Comment 1 Marian Rehak 2022-09-21 12:42:34 UTC 
Created bind tracking bugs for this issue:

Affects: fedora-all [bug 2128699]


Created dhcp tracking bugs for this issue:

Affects: fedora-all [bug 2128700]