HighFix available
bind — security advisory
An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.
- Products
- bind
- Affected versions
- Not specified
- Fixed versions
- 9.16.33-r0, 9.18.7-r0
- CVEs
- CVE-2022-2906
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 14:11 UTC · Revision 1
Source evidence
An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.
osv:ALPINE-CVE-2022-2906
bind
Fixed versions: 9.16.33-r0
bind
Fixed versions: 9.16.33-r0
bind
Fixed versions: 9.16.33-r0
bind
Fixed versions: 9.16.33-r0
bind
Fixed versions: 9.18.7-r0
bind
Fixed versions: 9.18.7-r0
bind
Fixed versions: 9.18.7-r0
bind
Fixed versions: 9.18.7-r0
bind
Fixed versions: 9.18.7-r0
bind
Fixed versions: 9.18.7-r0
bind
Fixed versions: 9.18.7-r0
bind
Fixed versions: 9.18.7-r0
Complete source record
{
"id": "7512f6612aa318d0ec25400c37682bf2b88ec38bf3a93fea48eed2f9fe580bfc",
"url": "https://osv.dev/vulnerability/ALPINE-CVE-2022-2906",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "ALPINE-CVE-2022-2906",
"summary": "An attacker can leverage this flaw to gradually erode available memory to the point where named crashes for lack of resources. Upon restart the attacker would have to begin again, but nevertheless there is the potential to deny service.",
"evidence": "osv:ALPINE-CVE-2022-2906",
"products": [
{
"name": {
"value": "bind",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.16.33-r0",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.16.33-r0",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.16.33-r0",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.16.33-r0",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.18.7-r0",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.18.7-r0",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.18.7-r0",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.18.7-r0",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.18.7-r0",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.18.7-r0",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.18.7-r0",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "bind",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.18.7-r0",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "ALPINE-CVE-2022-2906",
"aliases": [
"ALPINE-CVE-2022-2906"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.18.0"
},
{
"fixed": "9.16.33-r0"
}
]
}
],
"package": {
"name": "bind",
"purl": "pkg:apk/alpine/bind?arch=source",
"ecosystem": "Alpine:v3.13"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-2906.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.18.0"
},
{
"fixed": "9.16.33-r0"
}
]
}
],
"package": {
"name": "bind",
"purl": "pkg:apk/alpine/bind?arch=source",
"ecosystem": "Alpine:v3.14"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-2906.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.18.0"
},
{
"fixed": "9.16.33-r0"
}
]
}
],
"package": {
"name": "bind",
"purl": "pkg:apk/alpine/bind?arch=source",
"ecosystem": "Alpine:v3.15"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-2906.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.18.0"
},
{
"fixed": "9.16.33-r0"
}
]
}
],
"package": {
"name": "bind",
"purl": "pkg:apk/alpine/bind?arch=source",
"ecosystem": "Alpine:v3.16"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-2906.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.18.0"
},
{
"fixed": "9.18.7-r0"
}
]
}
],
"package": {
"name": "bind",
"purl": "pkg:apk/alpine/bind?arch=source",
"ecosystem": "Alpine:v3.17"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-2906.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.18.0"
},
{
"fixed": "9.18.7-r0"
}
]
}
],
"package": {
"name": "bind",
"purl": "pkg:apk/alpine/bind?arch=source",
"ecosystem": "Alpine:v3.18"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-2906.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.18.0"
},
{
"fixed": "9.18.7-r0"
}
]
}
],
"package": {
"name": "bind",
"purl": "pkg:apk/alpine/bind?arch=source",
"ecosystem": "Alpine:v3.19"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-2906.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.18.0"
},
{
"fixed": "9.18.7-r0"
}
]
}
],
"package": {
"name": "bind",
"purl": "pkg:apk/alpine/bind?arch=source",
"ecosystem": "Alpine:v3.20"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-2906.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.18.0"
},
{
"fixed": "9.18.7-r0"
}
]
}
],
"package": {
"name": "bind",
"purl": "pkg:apk/alpine/bind?arch=source",
"ecosystem": "Alpine:v3.21"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-2906.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.18.0"
},
{
"fixed": "9.18.7-r0"
}
]
}
],
"package": {
"name": "bind",
"purl": "pkg:apk/alpine/bind?arch=source",
"ecosystem": "Alpine:v3.22"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-2906.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.18.0"
},
{
"fixed": "9.18.7-r0"
}
]
}
],
"package": {
"name": "bind",
"purl": "pkg:apk/alpine/bind?arch=source",
"ecosystem": "Alpine:v3.23"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-2906.json"
},
"ecosystem_specific": {}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.18.0"
},
{
"fixed": "9.18.7-r0"
}
]
}
],
"package": {
"name": "bind",
"purl": "pkg:apk/alpine/bind?arch=source",
"ecosystem": "Alpine:v3.24"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2022-2906.json"
},
"ecosystem_specific": {}
}
],
"modified": "2026-10-15T07:17:54.202748411Z",
"provider": "osv",
"upstream": [
"CVE-2022-2906"
],
"references": [
"https://security.alpinelinux.org/vuln/CVE-2022-2906"
]
},
"related_cves": [
{
"value": "CVE-2022-2906",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 321824,
"published_at": "2022-09-21T11:15:09.62+00:00"
}