Lucene search
+L

944 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/09 12:00 a.m.•4 views

CVE-2022-45061: Inefficient Algorithmic Complexity

An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA RFC 3490 decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often...

7.5CVSS7.2AI score0.02666EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
•added 2022/10/08 12:00 a.m.•48 views

Debian dla-3139 : knot-resolver - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3139 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3139-1 [email protected] https://www.debian.org/lts/security/...

7.5CVSS7.3AI score0.01946EPSS
SaveExploits0References4
CNVD
CNVD
•added 2022/09/28 12:00 a.m.•101 views

NIC Knot Resolver Denial of Service Vulnerability

Knot Resolver is a cached DNS resolver implementation that includes a resolver library and daemon. A denial of service vulnerability exists in NIC Knot Resolver versions prior to 5.5.3. The vulnerability stems from not properly handling incoming error messages and can be exploited by a remote...

7.5CVSS7.1AI score0.01946EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2022/09/23 4:15 p.m.•10 views

DEBIAN-CVE-2022-40188

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

7.5CVSS7.3AI score0.01946EPSS
SaveExploits0References1
NVD
NVD
•added 2022/09/23 4:15 p.m.•27 views

CVE-2022-40188

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

7.5CVSS0.01946EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2022/09/23 4:15 p.m.•15 views

UBUNTU-CVE-2022-40188

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

7.5CVSS5.8AI score0.01946EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2022/09/23 4:15 p.m.•37 views

CVE-2022-40188

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

7.5CVSS7.1AI score0.01946EPSS
SaveExploits0References5
Prion
Prion
•added 2022/09/23 4:15 p.m.•24 views

Code injection

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

5CVSS7.2AI score0.01946EPSS
SaveExploits0References5Affected Software3
osv_cve
osv_cve
•added 2022/09/23 12:00 a.m.•27 views

CVE-2022-40188

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

7.5CVSS7.4AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2022/09/23 12:00 a.m.•6 views

CVE-2022-40188

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

6.8AI score0.01946EPSS
SaveExploits0References5
CVE
CVE
•added 2022/09/23 12:00 a.m.•155 views

CVE-2022-40188

CVE-2022-40188 affects Knot Resolver prior to version 5.5.3. The issue is a remote denial-of-service via CPU consumption caused by algorithmic complexity when an attack results in large nameserver or address sets being returned by an authoritative server. Public advisories (NVD entry and various ...

7.5CVSS7.2AI score0.01946EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/23 12:00 a.m.•6 views

CVE-2022-40188: Inefficient Algorithmic Complexity

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

7.5CVSS7.2AI score0.01946EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2022/09/23 12:00 a.m.•81 views

CVE-2022-40188

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

7.5CVSS7.4AI score0.01946EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/09/23 12:00 a.m.•11 views

PT-2022-25268 · Unknown +4 · Knot Resolver +4

Name of the Vulnerable Software and Affected Versions: Knot Resolver versions prior to 5.5.3 Description: The issue allows remote attackers to cause a denial of service due to algorithmic complexity, resulting in CPU consumption. This occurs when an authoritative server returns large NS sets or...

7.5CVSS6AI score0.01946EPSS
SaveExploits0References27
Mend
Mend
•added 2022/09/23 12:00 a.m.•4 views

CVE-2022-40188

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

8.7CVSS0.01946EPSS
SaveExploits0References12
Cvelist
Cvelist
•added 2022/09/23 12:00 a.m.•47 views

CVE-2022-40188

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service CPU consumption because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets...

7.5AI score0.01946EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2022/09/08 12:00 a.m.•26 views

Python Interpreter Type Conversion DoS

The vulnerability of the Python interpreter is related to errors during the conversion of data types int and str. Exploiting this vulnerability can allow an attacker to trigger a service failure due to the computational complexity involved...

7.1CVSS7.2AI score0.04486EPSS
SaveExploits0References8Affected Software6
Slackware Linux
Slackware Linux
•added 2022/09/07 6:45 p.m.•55 views

[slackware-security] python3

New python3 packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/python3-3.9.14-i586-1slack15.0.txz: Upgraded. This is a security and bugfix release. gh-95778: Converting between int and str in bas...

7.5CVSS7AI score0.04486EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•28 views

Ubuntu: Security Advisory (USN-4517-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.6AI score0.02356EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2022/05/14 1:59 a.m.•49 views

OpenStack Nova Denial of Service in network source security groups

Algorithmic complexity vulnerability in OpenStack Compute Nova before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service nova-network consumption via a large number of...

4CVSS6.8AI score0.02105EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder