Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade knot-resolver | Aug 22, 2024 | Sep 23, 2022 |
| Debian | — | Upgrade knot-resolver | Oct 11, 2022 | Sep 23, 2022 |
| Ubuntu | — | Upgrade knot-resolverUpgrade knot-resolver (Ubuntu Pro)Upgrade libkres-dev (Ubuntu Pro)Upgrade libkres6 (Ubuntu Pro) | Jul 14, 2023 | Sep 23, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub