Поиск уязвимостей
Количество 60
Количество 60
ELSA-2024-1335
ELSA-2024-1335: dnsmasq security update (IMPORTANT)
ELSA-2024-1334
ELSA-2024-1334: dnsmasq security update (IMPORTANT)
ELSA-2024-11003
ELSA-2024-11003: unbound security update (IMPORTANT)
ELSA-2024-0977
ELSA-2024-0977: unbound security update (IMPORTANT)
ELSA-2024-0965
ELSA-2024-0965: unbound security update (IMPORTANT)
openSUSE-SU-2024:0048-1
Security update for pdns-recursor
SUSE-SU-2025:0071-1
Security update for dnsmasq
ROS-20240410-24
Множественные уязвимости pdns-recursor
ROS-20240410-09
Множественные уязвимости python3-unbound
ALT-PU-2024-2453
ALT-PU-2024-2453: package `unbound` update to version 1.19.1-alt1
ALT-PU-2024-2451
ALT-PU-2024-2451: package `unbound` update to version 1.19.1-alt1
ALT-PU-2024-13229
ALT-PU-2024-13229: package `knot-resolver` update to version 6.0.7-alt1
SUSE-SU-2024:1991-1
Security update for unbound
SUSE-SU-2024:1923-1
Security update for unbound
CVE-2023-50387
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
CVE-2023-50387
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
CVE-2023-50387
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
CVE-2023-50387
MITRE: CVE-2023-50387 DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers
CVE-2023-50387
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6 ...
GHSA-8459-gg55-8qjj
Certain DNSSEC aspects of the DNS protocol (in RFC 4035 and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses when there is a zone with many DNSKEY and RRSIG records, aka the "KeyTrap" issue. The protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ELSA-2024-1335 ELSA-2024-1335: dnsmasq security update (IMPORTANT) | больше 2 лет назад | ||
| ELSA-2024-1334 ELSA-2024-1334: dnsmasq security update (IMPORTANT) | больше 2 лет назад | ||
| ELSA-2024-11003 ELSA-2024-11003: unbound security update (IMPORTANT) | почти 2 года назад | ||
| ELSA-2024-0977 ELSA-2024-0977: unbound security update (IMPORTANT) | больше 2 лет назад | ||
| ELSA-2024-0965 ELSA-2024-0965: unbound security update (IMPORTANT) | больше 2 лет назад | ||
 | openSUSE-SU-2024:0048-1 Security update for pdns-recursor | больше 2 лет назад | ||
| SUSE-SU-2025:0071-1 Security update for dnsmasq | почти 2 года назад | ||
 | ROS-20240410-24 Множественные уязвимости pdns-recursor | CVSS3: 7.5 | больше 2 лет назад | |
| ROS-20240410-09 Множественные уязвимости python3-unbound | CVSS3: 7.5 | больше 2 лет назад | |
| ALT-PU-2024-2453 ALT-PU-2024-2453: package `unbound` update to version 1.19.1-alt1 | CVSS3: 7.5 | больше 2 лет назад | |
| ALT-PU-2024-2451 ALT-PU-2024-2451: package `unbound` update to version 1.19.1-alt1 | CVSS3: 7.5 | больше 2 лет назад | |
| ALT-PU-2024-13229 ALT-PU-2024-13229: package `knot-resolver` update to version 6.0.7-alt1 | CVSS3: 7.5 | около 2 лет назад | |
| SUSE-SU-2024:1991-1 Security update for unbound | больше 2 лет назад | ||
| SUSE-SU-2024:1923-1 Security update for unbound | больше 2 лет назад | ||
 | CVE-2023-50387 Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records. | CVSS3: 7.5 | 100% Критический | больше 2 лет назад |
 | CVE-2023-50387 Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records. | CVSS3: 7.5 | 100% Критический | больше 2 лет назад |
 | CVE-2023-50387 Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records. | CVSS3: 7.5 | 100% Критический | больше 2 лет назад |
 | CVE-2023-50387 MITRE: CVE-2023-50387 DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers | 100% Критический | больше 2 лет назад | |
| CVE-2023-50387 Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6 ... | CVSS3: 7.5 | 100% Критический | больше 2 лет назад |
| GHSA-8459-gg55-8qjj Certain DNSSEC aspects of the DNS protocol (in RFC 4035 and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses when there is a zone with many DNSKEY and RRSIG records, aka the "KeyTrap" issue. The protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records. | CVSS3: 7.5 | 100% Критический | больше 2 лет назад |
Уязвимостей на страницу