Поиск уязвимостей
Количество 51
Количество 51
ALT-PU-2023-8645
ALT-PU-2023-8645: package `knot-resolver` update to version 6.0.2-alt1
CVE-2023-46317
Knot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical responses from servers.
CVE-2023-46317
Knot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical responses from servers.
CVE-2023-46317
Knot Resolver before 5.7.0 performs many TCP reconnections upon receiv ...
CVE-2023-50387
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
CVE-2023-50387
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
CVE-2023-50387
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
CVE-2023-50387
MITRE: CVE-2023-50387 DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers
CVE-2023-50387
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6 ...
GHSA-vwhm-7rfg-7rqc
Knot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical responses from servers.
BDU:2024-04315
Уязвимость DNS-преобразователя knot resolver, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю преобразовать защищённый через DNSSEC домен до состояния незащищённого DNSSEC
GHSA-8459-gg55-8qjj
Certain DNSSEC aspects of the DNS protocol (in RFC 4035 and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses when there is a zone with many DNSKEY and RRSIG records, aka the "KeyTrap" issue. The protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
BDU:2024-01359
Уязвимость компонента DNSSEC реализации протокола DNS сервера DNS BIND, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2025:0130-1
Security update for dnsmasq
ROS-20240611-07
Уязвимость dnsmasq
RLSA-2024:1335
Important: dnsmasq security update
ELSA-2024-1335
ELSA-2024-1335: dnsmasq security update (IMPORTANT)
ELSA-2024-1334
ELSA-2024-1334: dnsmasq security update (IMPORTANT)
ELSA-2024-11003
ELSA-2024-11003: unbound security update (IMPORTANT)
ELSA-2024-0977
ELSA-2024-0977: unbound security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2023-8645 ALT-PU-2023-8645: package `knot-resolver` update to version 6.0.2-alt1 | CVSS3: 7.5 | около 3 лет назад | |
 | CVE-2023-46317 Knot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical responses from servers. | CVSS3: 7.5 | 1% Низкий | около 3 лет назад |
 | CVE-2023-46317 Knot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical responses from servers. | CVSS3: 7.5 | 1% Низкий | около 3 лет назад |
| CVE-2023-46317 Knot Resolver before 5.7.0 performs many TCP reconnections upon receiv ... | CVSS3: 7.5 | 1% Низкий | около 3 лет назад |
| CVE-2023-50387 Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records. | CVSS3: 7.5 | 100% Критический | больше 2 лет назад |
 | CVE-2023-50387 Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records. | CVSS3: 7.5 | 100% Критический | больше 2 лет назад |
| CVE-2023-50387 Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records. | CVSS3: 7.5 | 100% Критический | больше 2 лет назад |
 | CVE-2023-50387 MITRE: CVE-2023-50387 DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers | 100% Критический | больше 2 лет назад | |
| CVE-2023-50387 Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6 ... | CVSS3: 7.5 | 100% Критический | больше 2 лет назад |
| GHSA-vwhm-7rfg-7rqc Knot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical responses from servers. | CVSS3: 7.5 | 1% Низкий | около 3 лет назад |
 | BDU:2024-04315 Уязвимость DNS-преобразователя knot resolver, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю преобразовать защищённый через DNSSEC домен до состояния незащищённого DNSSEC | CVSS3: 7.5 | 1% Низкий | около 3 лет назад |
| GHSA-8459-gg55-8qjj Certain DNSSEC aspects of the DNS protocol (in RFC 4035 and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses when there is a zone with many DNSKEY and RRSIG records, aka the "KeyTrap" issue. The protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records. | CVSS3: 7.5 | 100% Критический | больше 2 лет назад |
| BDU:2024-01359 Уязвимость компонента DNSSEC реализации протокола DNS сервера DNS BIND, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 100% Критический | больше 2 лет назад |
 | SUSE-SU-2025:0130-1 Security update for dnsmasq | почти 2 года назад | ||
 | ROS-20240611-07 Уязвимость dnsmasq | CVSS3: 7.5 | 100% Критический | больше 2 лет назад |
 | RLSA-2024:1335 Important: dnsmasq security update | больше 2 лет назад | ||
| ELSA-2024-1335 ELSA-2024-1335: dnsmasq security update (IMPORTANT) | больше 2 лет назад | ||
| ELSA-2024-1334 ELSA-2024-1334: dnsmasq security update (IMPORTANT) | больше 2 лет назад | ||
| ELSA-2024-11003 ELSA-2024-11003: unbound security update (IMPORTANT) | почти 2 года назад | ||
| ELSA-2024-0977 ELSA-2024-0977: unbound security update (IMPORTANT) | больше 2 лет назад |
Уязвимостей на страницу