---
id: CVE-2022-2795
title: >-
  By flooding the target resolver with queries exploiting this flaw an attacker
  can significantly impair the resolver's performance, effectively denying
  legitimate clients access to the DNS resolution service.
summary: >-
  By flooding the target resolver with queries exploiting this flaw an attacker
  can significantly impair the resolver's performance, effectively denying
  legitimate clients access to the DNS resolution service.
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
vendor: isc
product: bind
affected:
  - 'bind >= 9.0.0, < 9.16.33'
  - 'bind >= 9.18.0, < 9.18.7'
  - 'bind >= 9.19.0, < 9.19.5'
  - bind = 9.9.3
  - bind = 9.9.12
  - bind = 9.9.13
  - bind = 9.10.5
  - bind = 9.10.7
  - bind = 9.11.3
  - bind = 9.11.5
  - bind = 9.11.6
  - bind = 9.11.7
  - bind = 9.11.8
  - bind = 9.11.12
  - bind = 9.11.14-s1
  - bind = 9.11.19-s1
  - bind = 9.11.21
  - bind = 9.11.27
  - bind = 9.11.29
  - bind = 9.11.35
  - bind = 9.11.37
  - bind = 9.16.8
  - bind = 9.16.11
  - bind = 9.16.13
  - bind = 9.16.21
  - bind = 9.16.32
  - debian_linux = 10.0
  - debian_linux = 11.0
  - fedora = 35
  - fedora = 36
  - fedora = 37
patched:
  - bind 9.19.5
published: '2022-09-21'
updated: '2026-09-01'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-2795'
references:
  - url: 'http://www.openwall.com/lists/oss-security/2022/09/21/3'
    label: security-officer@isc.org
  - url: 'https://kb.isc.org/docs/cve-2022-2795'
    label: security-officer@isc.org
  - url: 'https://lists.debian.org/debian-lts-announce/2022/10/msg00007.html'
    label: security-officer@isc.org
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/
    label: security-officer@isc.org
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/
    label: security-officer@isc.org
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/
    label: security-officer@isc.org
  - url: 'https://security.gentoo.org/glsa/202210-25'
    label: security-officer@isc.org
  - url: 'https://www.debian.org/security/2022/dsa-5235'
    label: security-officer@isc.org
  - url: 'http://www.openwall.com/lists/oss-security/2022/09/21/3'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://kb.isc.org/docs/cve-2022-2795'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://lists.debian.org/debian-lts-announce/2022/10/msg00007.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.gentoo.org/glsa/202210-25'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.netapp.com/advisory/ntap-20241129-0002/'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://www.debian.org/security/2022/dsa-5235'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
epss: 0.02195
epssPercentile: 0.81728
ingestedAt: '2026-09-01T20:32:00.111Z'
---

## Overview

By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.

## Affected

- `bind >= 9.0.0, < 9.16.33`
- `bind >= 9.18.0, < 9.18.7`
- `bind >= 9.19.0, < 9.19.5`
- `bind = 9.9.3`
- `bind = 9.9.12`
- `bind = 9.9.13`
- `bind = 9.10.5`
- `bind = 9.10.7`
- `bind = 9.11.3`
- `bind = 9.11.5`
- `bind = 9.11.6`
- `bind = 9.11.7`
- `bind = 9.11.8`
- `bind = 9.11.12`
- `bind = 9.11.14-s1`
- `bind = 9.11.19-s1`
- `bind = 9.11.21`
- `bind = 9.11.27`
- `bind = 9.11.29`
- `bind = 9.11.35`
- `bind = 9.11.37`
- `bind = 9.16.8`
- `bind = 9.16.11`
- `bind = 9.16.13`
- `bind = 9.16.21`
- `bind = 9.16.32`
- `debian_linux = 10.0`
- `debian_linux = 11.0`
- `fedora = 35`
- `fedora = 36`
- `fedora = 37`

## Remediation

Upgrade past the affected range:

- `bind 9.19.5`