CVE-2020-12663

Опубликовано: 19 мая 2020

Источник: redhat

CVSS3: 7.5

EPSS Низкий

Описание

Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.

A flaw was found in unbound in versions prior to 1.10.1. An infinite loop can be created when malformed DNS answers are received from upstream servers. The highest threat from this vulnerability is to system availability.

Ссылки на источники

Дополнительная информация

Статус:

Important

Дефект:

CWE-835

https://bugzilla.redhat.com/show_bug.cgi?id=1837604unbound: infinite loop via malformed DNS answers received from upstream servers

EPSS

Процентиль: 88%

0.03588

Низкий

7.5 High

CVSS3

Связанные уязвимости

CVE-2020-12663

CVSS3: 7.5

ubuntu

около 6 лет назад

Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.

CVE-2020-12663

CVSS3: 7.5

nvd

около 6 лет назад

Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.

CVE-2020-12663

CVSS3: 7.5

msrc

почти 6 лет назад

Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.

CVE-2020-12663

CVSS3: 7.5

debian

около 6 лет назад

Unbound before 1.10.1 has an infinite loop via malformed DNS answers r ...

GHSA-rhjg-fh2p-jpv5

github

около 4 лет назад

Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.

EPSS

Процентиль: 88%

0.03588

Низкий

7.5 High

CVSS3