CVE-2023-26249

2023-02-2102:15:10

Google

osv.dev

knot resolver

amplification attack

denial of service

tcp connection

dns server

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

33.8%

JSON

Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response.

CPENameOperatorVersion
knot-resolvereq1.4.0
knot-resolvereq1.0.0-beta2
knot-resolvereq1.2.2
knot-resolvereq2.1.0
knot-resolvereq3.0.0
knot-resolvereq5.3.0
knot-resolvereq5.4.1
knot-resolvereq5.4.0
knot-resolvereq2.3.0
knot-resolvereq5.2.1

Name	Operator	Version
knot-resolver	eq	1.4.0
knot-resolver	eq	1.0.0-beta2
knot-resolver	eq	1.2.2
knot-resolver	eq	2.1.0
knot-resolver	eq	3.0.0
knot-resolver	eq	5.3.0
knot-resolver	eq	5.4.1
knot-resolver	eq	5.4.0
knot-resolver	eq	2.3.0
knot-resolver	eq	5.2.1