Lucene search
+L

2170 matches found

NVD
NVD
•added 2020/05/19 5:15 p.m.•28 views

CVE-2020-10995

PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafted rep...

7.5CVSS7.9AI score0.04481EPSS
SaveExploits0References6
OSV
OSV
•added 2020/05/19 5:15 p.m.•4 views

DEBIAN-CVE-2020-10995

PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafted rep...

7.5CVSS7.5AI score0.04481EPSS
SaveExploits0References1
Prion
Prion
•added 2020/05/19 5:15 p.m.•35 views

Design/Logic Flaw

PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafted rep...

5CVSS7.4AI score0.04481EPSS
SaveExploits0References6Affected Software5
Cvelist
Cvelist
•added 2020/05/19 4:04 p.m.•46 views

CVE-2020-10995

PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafted rep...

7.5AI score0.04481EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2020/05/19 4:04 p.m.•95 views

CVE-2020-10995

PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafted rep...

7.5CVSS7.5AI score0.04481EPSS
SaveExploits0
CVE
CVE
•added 2020/05/19 4:04 p.m.•322 views

CVE-2020-10995

PowerDNS Recursor (PowerDNS Recursor 4.1.0–4.3.0) is affected by CVE-2020-10995. A DNS-protocol issue allows an attacker to use recursive resolvers to amplify traffic toward third-party authoritative name servers, potentially degrading service. Mitigations exist in PowerDNS Recursor 4.1.16, 4.2.2...

7.5CVSS7.5AI score0.04481EPSS
SaveExploits0References6Affected Software1
Mend
Mend
•added 2020/05/19 4:04 p.m.•0 views

CVE-2020-10995

PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafted rep...

8.7CVSS0.04481EPSS
SaveExploits0References11
AlpineLinux
AlpineLinux
•added 2020/05/19 4:04 p.m.•125 views

CVE-2020-10995

PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recursive DNS services to attack third party authoritative name servers. The attack uses a crafted rep...

7.5CVSS7.5AI score0.04481EPSS
SaveExploits0
NVD
NVD
•added 2020/05/19 2:15 p.m.•37 views

CVE-2020-8616

A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to process the referral...

8.6CVSS8.5AI score0.10593EPSS
SaveExploits1References13
OSV
OSV
•added 2020/05/19 2:15 p.m.•8 views

DEBIAN-CVE-2020-8616

A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to process the referral...

8.6CVSS6.6AI score0.10593EPSS
SaveExploits1References1
OSV
OSV
•added 2020/05/19 2:15 p.m.•8 views

ALPINE-CVE-2020-8616

A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to process the referral...

8.6CVSS6.6AI score0.10593EPSS
SaveExploits1References1
CVE
CVE
•added 2020/05/19 2:05 p.m.•1188 views

CVE-2020-8616

CVE-2020-8616 (ISC BIND): A denial-of-service exists due to failure to limit the number of fetches when processing referrals. A remote attacker can craft referrals to cause a recursing server to perform a very large number of fetches, degrading performance and enabling potential reflection attack...

8.6CVSS6.6AI score0.10593EPSS
SaveExploits1References13Affected Software1
Mend
Mend
•added 2020/05/19 2:05 p.m.•0 views

CVE-2020-8616

A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to process the referral...

9.2CVSS0.10593EPSS
SaveExploits1References14
AlpineLinux
AlpineLinux
•added 2020/05/19 2:05 p.m.•63 views

CVE-2020-8616

A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to process the referral...

8.6CVSS6.6AI score0.10593EPSS
SaveExploits1
OSV
OSV
•added 2020/05/19 1:15 p.m.•35 views

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.5CVSS6.6AI score
SaveExploits0References6
OSV
OSV
•added 2020/05/19 1:15 p.m.•5 views

DEBIAN-CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.5CVSS7.5AI score0.02612EPSS
SaveExploits0References1
NVD
NVD
•added 2020/05/19 1:15 p.m.•27 views

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.5CVSS7.3AI score0.02612EPSS
SaveExploits0References6
Prion
Prion
•added 2020/05/19 1:15 p.m.•33 views

Code injection

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

5CVSS7.3AI score0.02612EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2020/05/19 1:15 p.m.•18 views

UBUNTU-CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.5CVSS7.1AI score0.02612EPSS
SaveExploits0References7
UbuntuCve
UbuntuCve
•added 2020/05/19 1:15 p.m.•40 views

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.5CVSS7.2AI score0.02612EPSS
SaveExploits0References6
Rows per page
Query Builder