Lucene search
+L

417 matches found

OSV
OSV
added 2020/05/19 1:15 p.m.33 views

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.5CVSS6.6AI score
SaveExploits0References6
Prion
Prion
added 2020/05/19 1:15 p.m.27 views

Code injection

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

5CVSS7.3AI score0.02619EPSS
SaveExploits0References5Affected Software1
UbuntuCve
UbuntuCve
added 2020/05/19 1:15 p.m.34 views

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.5CVSS7.2AI score0.02619EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2020/05/19 12:0 a.m.25 views

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.2AI score0.02619EPSS
SaveExploits0References6
CVE
CVE
added 2020/05/19 12:0 a.m.195 views

CVE-2020-12667

Knot Resolver (the Knot-resolver project) is affected by CVE-2020-12667. The vulnerability allows traffic amplification via a crafted DNS answer from an attacker-controlled server, triggered by random subdomains in the NSDNAME field of NS records (NXNSAttack). Affected versions are Knot Resolver ...

7.5CVSS7.2AI score0.02619EPSS
SaveExploits0References6Affected Software1
AlpineLinux
AlpineLinux
added 2020/05/19 12:0 a.m.77 views

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.5CVSS7.3AI score0.02619EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2020/05/19 12:0 a.m.23 views

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

6.6AI score0.02619EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2020/05/19 12:0 a.m.3 views

PT-2020-13194 · Cz.Nic +3 · Knot Resolver +3

Name of the Vulnerable Software and Affected Versions: Knot Resolver versions prior to 5.1.1 Description: The issue allows traffic amplification via a crafted DNS answer from an attacker-controlled server, also known as an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME ...

7.5CVSS6.7AI score0.02619EPSS
SaveExploits1References32
Debian CVE
Debian CVE
added 2020/05/19 12:0 a.m.52 views

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

7.5CVSS7.3AI score0.02619EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2020/01/09 12:0 a.m.29 views

Fedora Update for knot-resolver FEDORA-2019-866dc03603

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.5AI score0.02166EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2019/12/18 12:0 a.m.24 views

Knot Resolver < 4.3.0 DoS Vulnerability

Knot Resolver is prone to a denial of service vulnerability through high CPU utilization. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as...

7.5CVSS7.3AI score0.02166EPSS
SaveExploits1References1
OSV
OSV
added 2019/12/16 4:15 p.m.30 views

CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS6.4AI score0.02166EPSS
SaveExploits1References3
NVD
NVD
added 2019/12/16 4:15 p.m.25 views

CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS7.2AI score0.02166EPSS
SaveExploits1References3
OSV
OSV
added 2019/12/16 4:15 p.m.3 views

DEBIAN-CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS7.2AI score0.02166EPSS
SaveExploits1References1
OSV
OSV
added 2019/12/16 4:15 p.m.7 views

UBUNTU-CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS7.1AI score0.02166EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2019/12/16 4:15 p.m.29 views

CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS7AI score0.02166EPSS
SaveExploits1References3
Prion
Prion
added 2019/12/16 4:15 p.m.21 views

Design/Logic Flaw

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

5CVSS7.2AI score0.02166EPSS
SaveExploits1References2Affected Software2
CNVD
CNVD
added 2019/12/16 12:0 a.m.3 views

Knot Resolver Denial of Service Vulnerability

Knot Resolver is a cached DNS resolver implementation that includes a resolver library and daemon. A security vulnerability exists in Knot Resolver. An attacker could exploit this vulnerability to cause a denial of service...

7.5CVSS6.8AI score0.02166EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2019/12/16 12:0 a.m.12 views

PT-2019-15812 · Cz.Nic +2 · Knot Resolver +2

Name of the Vulnerable Software and Affected Versions: knot-resolver versions prior to 4.3.0 Description: The issue allows for denial of service through high CPU utilization. This occurs when DNS replies contain a large number of resource records, which can be processed inefficiently. In extreme...

7.5CVSS6.8AI score0.02619EPSS
SaveExploits1References25
CVE
CVE
added 2019/12/16 12:0 a.m.139 views

CVE-2019-19331

Knot Resolver (knot-resolver) is affected by CVE-2019-19331, with exploitation arising from processing DNS responses containing a large number of resource records. The issue exists in versions before 4.3.0, and can cause denial of service via high CPU utilization, potentially taking several CPU s...

7.5CVSS7.1AI score0.02166EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder