Описание
Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
Ссылки
- Technical DescriptionThird Party Advisory
- Mailing ListThird Party Advisory
- Technical DescriptionVendor Advisory
- Release NotesVendor Advisory
- Technical DescriptionThird Party Advisory
- Mailing ListThird Party Advisory
- Technical DescriptionVendor Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
EPSS
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
Связанные уязвимости
Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
Knot Resolver before 5.1.1 allows traffic amplification via a crafted ...
Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
ALT-PU-2020-1995: package `knot-resolver` update to version 5.1.1-alt1
EPSS
7.5 High
CVSS3
5 Medium
CVSS2