DeutschShown in its original language — a full translation is planned for a future version.
Mehrere DNS Server: Schwachstelle ermöglicht Denial of Service
view advisory published 2020-05-19
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in mehreren DNS Server Produkten ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-10995US | high7.5 | — | ||
PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious… | ||||
| CVE-2020-8616US | high8.6 | — | ||
A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafte… | ||||
| CVE-2020-12662US | high7.5 | — | ||
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records. | ||||
| CVE-2020-12667US | high7.5 | — | ||
Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomai… | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2020:2344 vom 2020-06-01external
- CentOS Security Advisory CESA-2020:2383 vom 2020-06-04external
- CentOS Security Advisory CESA-2020:2414 vom 2020-06-09external
- CentOS Security Advisory CESA-2020:2414 vom 2020-06-09external
- CentOS Security Advisory CESA-2020:2642 vom 2020-06-23external
- SUSE Security Update SUSE-SU-2020:1819-1 vom 2020-07-01external
- SUSE Security Update SUSE-SU-2020:1772-1 vom 2020-06-26external
- NXNSAttack vom 2020-05-19external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan