Lucene search

K
redhatcveRedhat.comRH:CVE-2024-33655
HistoryMay 10, 2024 - 4:24 a.m.

CVE-2024-33655

2024-05-1004:24:54
redhat.com
access.redhat.com
33
cve-2024-33655
no description
information

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.3%

A DNSBomb flaw was found in the unbound package. The DNSBomb attack works by sending low-rate spoofed queries for a malicious zone to Unbound. By controlling the delay of the malicious authoritative answers, Unbound slowly accumulates pending answers for the spoofed addresses. When the authoritative answers become available to Unbound at the same time, Unbound starts serving all the accumulated queries. This results in large-sized, concentrated response bursts to the spoofed addresses.

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.3%