{"id":"CVE-2022-0396","details":"BIND 9.16.11 -\u003e 9.16.26, 9.17.0 -\u003e 9.18.0 and versions 9.16.11-S1 -\u003e 9.16.26-S1 of the BIND Supported Preview Edition. Specifically crafted TCP streams can cause connections to BIND to remain in CLOSE_WAIT status for an indefinite period of time, even after the client has terminated the connection.","modified":"2026-08-07T11:48:44.566627080Z","published":"2022-03-23T11:15:08.380Z","related":["ALSA-2022:7643","ALSA-2022:8068","CGA-fc8c-2qx2-vrf5","SUSE-SU-2022:2713-1","openSUSE-SU-2024:12081-1"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*"],"extracted_events":[{"fixed":"1.0"}],"source":"CPE_RANGE","vendor_product":"siemens:sinec_ins"},{"source":"CPE_STRING","vendor_product":"fedoraproject:fedora","cpes":["cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"34"},{"last_affected":"34"},{"introduced":"35"},{"last_affected":"35"},{"introduced":"36"},{"last_affected":"36"}]},{"cpes":["cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*","cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.0-NA"},{"last_affected":"1.0-NA"},{"introduced":"1.0-sp1"},{"last_affected":"1.0-sp1"}],"source":"CPE_STRING","vendor_product":"siemens:sinec_ins"}]},"references":[{"type":"ADVISORY","url":"https://kb.isc.org/v1/docs/cve-2022-0396"},{"type":"ADVISORY","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYD7US4HZRFUGAJ66ZTHFBYVP5N3OQBY/"},{"type":"ADVISORY","url":"https://security.gentoo.org/glsa/202210-25"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20220408-0001/"},{"type":"FIX","url":"https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/isc-projects/bind9","events":[{"introduced":"9ff601bcca506f745e5627fc9630efdd80aaafac"},{"fixed":"96094c577f5aa8bf8d6dd7533d7be39effb3a243"},{"introduced":"04ca7cc4b6993f47ea61852c759d047c83be7b3f"},{"last_affected":"8db45afa1affcb823e68afdeddedf93e136f5d3e"}],"database_specific":{"cpe":["cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*","cpe:2.3:a:isc:bind:*:*:*:*:supported_preview:*:*:*","cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"9.16.11"},{"fixed":"9.16.27"},{"introduced":"9.17.0"},{"last_affected":"9.18.0"}],"source":"CPE_RANGE"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-0396.json"}},{"ranges":[{"type":"GIT","repo":"https://gitlab.isc.org/isc-projects/bind9","events":[{"introduced":"9ff601bcca506f745e5627fc9630efdd80aaafac"},{"fixed":"96094c577f5aa8bf8d6dd7533d7be39effb3a243"},{"introduced":"04ca7cc4b6993f47ea61852c759d047c83be7b3f"},{"last_affected":"8db45afa1affcb823e68afdeddedf93e136f5d3e"}],"database_specific":{"extracted_events":[{"introduced":"9.16.11"},{"fixed":"9.16.27"},{"introduced":"9.17.0"},{"last_affected":"9.18.0"}],"source":"CPE_RANGE","cpe":["cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*","cpe:2.3:a:isc:bind:*:*:*:*:supported_preview:*:*:*","cpe:2.3:a:isc:bind:*:*:*:*:*:*:*:*"]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-0396.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}]}