{"id":"CLSA-2022-1664475166","summary":"Fix CVE(s): CVE-2022-38177, CVE-2022-2795","details":"\n   * SECURITY UPDATE: degrade resolver performance\n     - debian/patches/CVE-2022-2795.patch: adds limits in fctx_getaddresses\n       to avoid spending excessive amounts of time on processing large\n       delegations in resolver code in lib/dns/resolver.c.\n     - CVE-2022-2795\n   * SECURITY UPDATE: memory leak\n     - debian/patches/CVE-2022-38177.patch: avoid return DST_RET when there is a\n       signature length mismatch in lib/dns/opensslecdsa_link.c.\n     - CVE-2022-38177","modified":"2026-06-04T10:04:58.178275063Z","published":"2022-09-29T18:12:46Z","upstream":["CVE-2022-2795","CVE-2022-38177"],"references":[{"type":"ADVISORY","url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1664475166"}],"affected":[{"package":{"name":"bind9","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/bind9?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"bind9-doc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/bind9-doc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"bind9-host","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/bind9-host?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"bind9utils","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/bind9utils?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"dnsutils","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/dnsutils?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"host","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/host?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"libbind-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libbind-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"libbind-export-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libbind-export-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"libbind9-140","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libbind9-140?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"libdns-export162","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libdns-export162?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"libdns162","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libdns162?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"libirs-export141","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libirs-export141?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"libirs141","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libirs141?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"libisc-export160","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libisc-export160?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"libisc160","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libisc160?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"libisccc-export140","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libisccc-export140?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"libisccc140","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libisccc140?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"libisccfg-export140","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libisccfg-export140?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"libisccfg140","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/libisccfg140?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"liblwres141","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/liblwres141?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}},{"package":{"name":"lwresd","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/lwresd?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:9.10.3.dfsg.P4-8ubuntu1.19+tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2022-1664475166.json"}}],"schema_version":"1.7.5"}