Поиск уязвимостей
Количество 42
Количество 42
BDU:2024-01462
Уязвимость компонента DNSSEC реализации протокола DNS сервера DNS BIND, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20240701-02
Уязвимость dnsmasq
ROS-20240410-24
Множественные уязвимости pdns-recursor
ROS-20240410-09
Множественные уязвимости python3-unbound
ALT-PU-2024-2453
ALT-PU-2024-2453: package `unbound` update to version 1.19.1-alt1
ALT-PU-2024-2451
ALT-PU-2024-2451: package `unbound` update to version 1.19.1-alt1
ALT-PU-2024-13229
ALT-PU-2024-13229: package `knot-resolver` update to version 6.0.7-alt1
ROS-20240611-09
Множественные уязвимости bind
ALT-PU-2024-18341
ALT-PU-2024-18341: package `bind` update to version 9.18.24-alt1
ALT-PU-2024-18050
ALT-PU-2024-18050: package `bind` update to version 9.16.48-alt1
CVE-2023-50868
The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.
CVE-2023-50868
The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.
CVE-2023-50868
The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.
CVE-2023-50868
MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPU
CVE-2023-50868
The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 whe ...
GHSA-pv4h-p8jr-6cv2
The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations.
SUSE-SU-2025:0130-1
Security update for dnsmasq
RLSA-2024:1335
Important: dnsmasq security update
ELSA-2024-1335
ELSA-2024-1335: dnsmasq security update (IMPORTANT)
ELSA-2024-1334
ELSA-2024-1334: dnsmasq security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-01462 Уязвимость компонента DNSSEC реализации протокола DNS сервера DNS BIND, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 74% Высокий | больше 2 лет назад |
 | ROS-20240701-02 Уязвимость dnsmasq | CVSS3: 7.5 | 74% Высокий | больше 2 лет назад |
| ROS-20240410-24 Множественные уязвимости pdns-recursor | CVSS3: 7.5 | больше 2 лет назад | |
| ROS-20240410-09 Множественные уязвимости python3-unbound | CVSS3: 7.5 | больше 2 лет назад | |
| ALT-PU-2024-2453 ALT-PU-2024-2453: package `unbound` update to version 1.19.1-alt1 | CVSS3: 7.5 | больше 2 лет назад | |
| ALT-PU-2024-2451 ALT-PU-2024-2451: package `unbound` update to version 1.19.1-alt1 | CVSS3: 7.5 | больше 2 лет назад | |
| ALT-PU-2024-13229 ALT-PU-2024-13229: package `knot-resolver` update to version 6.0.7-alt1 | CVSS3: 7.5 | около 2 лет назад | |
| ROS-20240611-09 Множественные уязвимости bind | CVSS3: 7.5 | больше 2 лет назад | |
| ALT-PU-2024-18341 ALT-PU-2024-18341: package `bind` update to version 9.18.24-alt1 | CVSS3: 7.5 | больше 2 лет назад | |
| ALT-PU-2024-18050 ALT-PU-2024-18050: package `bind` update to version 9.16.48-alt1 | CVSS3: 7.5 | больше 2 лет назад | |
 | CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations. | CVSS3: 7.5 | 74% Высокий | больше 2 лет назад |
 | CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations. | CVSS3: 7.5 | 74% Высокий | больше 2 лет назад |
 | CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations. | CVSS3: 7.5 | 74% Высокий | больше 2 лет назад |
 | CVE-2023-50868 MITRE: CVE-2023-50868 NSEC3 closest encloser proof can exhaust CPU | CVSS3: 7.5 | 74% Высокий | больше 2 лет назад |
| CVE-2023-50868 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 whe ... | CVSS3: 7.5 | 74% Высокий | больше 2 лет назад |
| GHSA-pv4h-p8jr-6cv2 The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU consumption for SHA-1 computations) via DNSSEC responses in a random subdomain attack, aka the "NSEC3" issue. The RFC 5155 specification implies that an algorithm must perform thousands of iterations of a hash function in certain situations. | CVSS3: 7.5 | 74% Высокий | больше 2 лет назад |
 | SUSE-SU-2025:0130-1 Security update for dnsmasq | почти 2 года назад | ||
 | RLSA-2024:1335 Important: dnsmasq security update | больше 2 лет назад | ||
| ELSA-2024-1335 ELSA-2024-1335: dnsmasq security update (IMPORTANT) | больше 2 лет назад | ||
| ELSA-2024-1334 ELSA-2024-1334: dnsmasq security update (IMPORTANT) | больше 2 лет назад |
Уязвимостей на страницу