Knot Resolver before 5.6.0 enables attackers to consume...
High severity
Unreviewed
Published
Feb 21, 2023
to the GitHub Advisory Database
•
Updated Mar 10, 2023
Description
Published by the National Vulnerability Database
Feb 21, 2023
Published to the GitHub Advisory Database
Feb 21, 2023
Last updated
Mar 10, 2023
Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response.
References