Описание
A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state, opening possibility of domain hijack using attacks against insecure DNS protocol.
Ссылки
- Issue TrackingThird Party Advisory
- Release NotesVendor Advisory
- Issue TrackingThird Party Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Одно из
EPSS
6.3 Medium
CVSS3
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
Связанные уязвимости
A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state, opening possibility of domain hijack using attacks against insecure DNS protocol.
A vulnerability was discovered in DNS resolver of knot resolver before ...
A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state, opening possibility of domain hijack using attacks against insecure DNS protocol.
Уязвимость DNS-преобразователя knot resolver, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю преобразовать защищённый через DNSSEC домен до состояния незащищённого DNSSEC
EPSS
6.3 Medium
CVSS3
7.5 High
CVSS3
5 Medium
CVSS2