Описание
Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | not-affected | 5.1.1-0.1ubuntu1 |
| eoan | ignored | end of life |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | needed | |
| esm-apps/focal | released | 3.2.1-3ubuntu2.2 |
| esm-apps/jammy | not-affected | 5.1.1-0.1ubuntu1 |
| esm-apps/noble | not-affected | 5.1.1-0.1ubuntu1 |
| esm-apps/resolute | not-affected | 5.1.1-0.1ubuntu1 |
| esm-apps/xenial | ignored | end of ESM support, was needed |
Показывать по
Ссылки на источники
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
Knot Resolver before 5.1.1 allows traffic amplification via a crafted ...
Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
EPSS
5 Medium
CVSS2
7.5 High
CVSS3