Описание
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 2:4.24.6+dfsg-1ubuntu1 |
| esm-infra-legacy/trusty | needs-triage | |
| esm-infra-legacy/xenial | needs-triage | |
| esm-infra/bionic | needs-triage | |
| esm-infra/focal | needs-triage | |
| jammy | released | 2:4.15.13+dfsg-0ubuntu1.13 |
| noble | released | 2:4.19.5+dfsg-4ubuntu9.7 |
| resolute | released | 2:4.23.6+dfsg-1ubuntu2.2 |
| stonking | not-affected | 2:4.24.6+dfsg-1ubuntu1 |
| upstream | released | 4.24.5,4.23.10,4.22.11 |
Показывать по
EPSS
5.3 Medium
CVSS3
Связанные уязвимости
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the cache and evicting legitimate TKEY entries. This can prevent legitimate TSIG authentication for signed DNS queries, resulting in a denial of service.
A flaw was found in Samba's internal DNS server where unauthenticated ...
EPSS
5.3 Medium
CVSS3