Lucene search

Alpine Linux Development TeamALPINE:CVE-2024-33655

HistoryJun 06, 2024 - 5:15 p.m.

CVE-2024-33655

2024-06-0617:15:51

Alpine Linux Development Team

security.alpinelinux.org

cve-2024-33655

rfc 1035

denial of service

remote attackers

resource consumption

dnsbomb issue

traffic amplification

unix

6.3 Medium

AI Score

Confidence

Low

0 Low

EPSS

Percentile

0.0%

JSON

The DNS protocol in RFC 1035 and updates allows remote attackers to cause a denial of service (resource consumption) by arranging for DNS queries to be accumulated for seconds, such that responses are later sent in a pulsing burst (which can be considered traffic amplification in some cases), aka the “DNSBomb” issue.

OSVersionArchitecturePackageVersionFilename
Alpineedge-mainnoarchunbound< 1.20.0-r0UNKNOWN
Alpine3.17-mainnoarchunbound< 1.20.0-r0UNKNOWN
Alpine3.18-mainnoarchunbound< 1.20.0-r0UNKNOWN
Alpine3.19-mainnoarchunbound< 1.20.0-r0UNKNOWN
Alpine3.20-mainnoarchunbound< 1.20.0-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-main	noarch	unbound	< 1.20.0-r0	UNKNOWN
Alpine	3.17-main	noarch	unbound	< 1.20.0-r0	UNKNOWN
Alpine	3.18-main	noarch	unbound	< 1.20.0-r0	UNKNOWN
Alpine	3.19-main	noarch	unbound	< 1.20.0-r0	UNKNOWN
Alpine	3.20-main	noarch	unbound	< 1.20.0-r0	UNKNOWN