Lucene search
+L

243 matches found

OSV
OSV
added 2020/05/19 1:15 p.m.1 views

DEBIAN-CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.5CVSS7.5AI score0.02619EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2020/05/19 1:15 p.m.32 views

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.5CVSS7.2AI score0.02619EPSS
Exploits0References6
Prion
Prion
added 2020/05/19 1:15 p.m.27 views

Code injection

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

5CVSS7.3AI score0.02619EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2020/05/19 12:0 a.m.24 views

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.2AI score0.02619EPSS
Exploits0References6
CVE
CVE
added 2020/05/19 12:0 a.m.194 views

CVE-2020-12667

Knot Resolver (the Knot-resolver project) is affected by CVE-2020-12667. The vulnerability allows traffic amplification via a crafted DNS answer from an attacker-controlled server, triggered by random subdomains in the NSDNAME field of NS records (NXNSAttack). Affected versions are Knot Resolver ...

7.5CVSS7.2AI score0.02619EPSS
Exploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2020/05/19 12:0 a.m.2 views

PT-2020-13194 · Cz.Nic +3 · Knot Resolver +3

Name of the Vulnerable Software and Affected Versions: Knot Resolver versions prior to 5.1.1 Description: The issue allows traffic amplification via a crafted DNS answer from an attacker-controlled server, also known as an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME ...

7.5CVSS6.7AI score0.02619EPSS
Exploits1References32
Vulnrichment
Vulnrichment
added 2020/05/19 12:0 a.m.23 views

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

6.6AI score0.02619EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2020/05/19 12:0 a.m.47 views

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.5CVSS7.3AI score0.02619EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2020/05/19 12:0 a.m.65 views

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.5CVSS7.3AI score0.02619EPSS
Exploits0
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.29 views

Fedora Update for knot-resolver FEDORA-2019-866dc03603

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.02166EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2019/12/18 12:0 a.m.24 views

Knot Resolver < 4.3.0 DoS Vulnerability

Knot Resolver is prone to a denial of service vulnerability through high CPU utilization. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as...

7.5CVSS7.3AI score0.02166EPSS
Exploits1References1
OSV
OSV
added 2019/12/16 4:15 p.m.3 views

DEBIAN-CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS7.2AI score0.02166EPSS
Exploits1References1
OSV
OSV
added 2019/12/16 4:15 p.m.30 views

CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS6.4AI score0.02166EPSS
Exploits1References3
NVD
NVD
added 2019/12/16 4:15 p.m.24 views

CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS7.2AI score0.02166EPSS
Exploits1References3
OSV
OSV
added 2019/12/16 4:15 p.m.6 views

UBUNTU-CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS7.1AI score0.02166EPSS
Exploits1References4
Prion
Prion
added 2019/12/16 4:15 p.m.20 views

Design/Logic Flaw

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

5CVSS7.2AI score0.02166EPSS
Exploits1References2Affected Software2
UbuntuCve
UbuntuCve
added 2019/12/16 4:15 p.m.29 views

CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS7AI score0.02166EPSS
Exploits1References3
CVE
CVE
added 2019/12/16 12:0 a.m.138 views

CVE-2019-19331

Knot Resolver (knot-resolver) is affected by CVE-2019-19331, with exploitation arising from processing DNS responses containing a large number of resource records. The issue exists in versions before 4.3.0, and can cause denial of service via high CPU utilization, potentially taking several CPU s...

7.5CVSS7.1AI score0.02166EPSS
Exploits1References3Affected Software1
CNVD
CNVD
added 2019/12/16 12:0 a.m.3 views

Knot Resolver Denial of Service Vulnerability

Knot Resolver is a cached DNS resolver implementation that includes a resolver library and daemon. A security vulnerability exists in Knot Resolver. An attacker could exploit this vulnerability to cause a denial of service...

7.5CVSS6.8AI score0.02166EPSS
Exploits1References1
Cvelist
Cvelist
added 2019/12/16 12:0 a.m.35 views

CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS7.1AI score0.02166EPSS
Exploits1References3
Rows per page
Query Builder