Lucene search
+L

297 matches found

SUSE CVE
SUSE CVE
•added 2023/02/22 2:54 a.m.•16 views

SUSE CVE-2023-26249

Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response...

7.5CVSS6.8AI score0.00708EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2023/02/22 12:00 a.m.•103 views

Knot Resolver < 5.6.0 DoS Vulnerability

Knot Resolver is prone to a denial of service DoS vulnerability. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

7.5CVSS7.5AI score0.00708EPSS
SaveExploits0References1
NVD
NVD
•added 2023/02/21 2:15 a.m.•37 views

CVE-2023-26249

Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response...

7.5CVSS7.4AI score0.00708EPSS
SaveExploits0References1
OSV
OSV
•added 2023/02/21 2:15 a.m.•18 views

DEBIAN-CVE-2023-26249

Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response...

7.5CVSS7.3AI score0.00708EPSS
SaveExploits0References1
Prion
Prion
•added 2023/02/21 2:15 a.m.•28 views

Code injection

Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response...

5CVSS7.4AI score0.00708EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2023/02/21 2:15 a.m.•32 views

UBUNTU-CVE-2023-26249

Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response...

7.5CVSS7.1AI score0.00708EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/02/21 12:00 a.m.•16 views

Knot Resolver 安全漏洞

Knot Resolver is a caching DNS resolver implementation that includes a resolver library and daemon. A security vulnerability exists in Knot Resolver versions prior to 5.6.0, which can be exploited by an attacker to consume server resources and cause a denial of service...

7.5CVSS7.2AI score0.00708EPSS
SaveExploits0References2
Mend
Mend
•added 2023/02/21 12:00 a.m.•2 views

CVE-2023-26249

Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response...

8.7CVSS0.00708EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/02/21 12:00 a.m.•41 views

CVE-2023-26249

Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response...

7.6AI score0.00708EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/02/21 12:00 a.m.•5 views

CVE-2023-26249

Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response...

7.4AI score0.00708EPSS
SaveExploits0References1
OSV
OSV
•added 2023/02/21 12:00 a.m.•18 views

CVE-2023-26249

Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response...

7.5CVSS7.4AI score
SaveExploits0References3
CVE
CVE
•added 2023/02/21 12:00 a.m.•72 views

CVE-2023-26249

Knot Resolver is affected by a DoS vulnerability (CVE-2023-26249) in versions prior to 5.6.0. The issue arises from insufficient input validation in the DNS translator, allowing a single client query to trigger many TCP reconnections (up to about a hundred attempts) when upstream servers close wi...

7.5CVSS7.3AI score0.00708EPSS
SaveExploits0References1Affected Software1
UbuntuCve
UbuntuCve
•added 2023/02/21 12:00 a.m.•25 views

CVE-2023-26249

Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response...

7.5CVSS7.1AI score0.00708EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/02/21 12:00 a.m.•2 views

PT-2023-20562

Name of the Vulnerable Software and Affected Versions Knot Resolver versions prior to 5.6.0 Description The issue enables attackers to consume the resolver's resources, launching amplification attacks and potentially causing a denial of service. A single client query may lead to a hundred TCP...

7.5CVSS0.00708EPSS
SaveExploits0References13
Debian CVE
Debian CVE
•added 2023/02/21 12:00 a.m.•74 views

CVE-2023-26249

Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response...

7.5CVSS7.4AI score0.00708EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/21 12:00 a.m.•3 views

CVE-2023-26249: Allocation of Resources Without Limits or Throttling

Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response...

7.5CVSS5.8AI score0.00708EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:34 a.m.•5 views

SUSE CVE-2018-1110

A flaw was found in knot-resolver before version 2.3.0. Malformed DNS messages may cause denial of service...

7.5CVSS7.1AI score0.01243EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 4:27 a.m.•6 views

SUSE CVE-2018-10920

Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache...

7.5CVSS6.8AI score0.03239EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 3:58 a.m.•11 views

SUSE CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.5CVSS7.4AI score0.02612EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 3:38 a.m.•17 views

SUSE CVE-2021-40083

Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case NSEC3 with too many iterations used for a positive wildcard proof...

7.5CVSS7.5AI score0.01421EPSS
SaveExploits0References3
Rows per page
Query Builder