CVE | CVE-2022-40188 |
CVE Title | |
Published Date | 2022-09-23T16:15Z |
Modified Date | 2022-10-01T06:15Z |
CWE Type | CWE-400 |
CVSS 3.x | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Description | Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets. |
References | |
By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites. | |
Reference URL | https://gitlab.nic.cz/knot/knot-resolver/-/merge_requests/1343#note_262558 |
Reference Description | CONFIRM https://gitlab.nic.cz/knot/knot-resolver/-/merge_requests/1343#note_262558 |
Reference URL | https://lists.fedoraproject.org/archives/list/[email protected]/message/S2VE5K3VDUHJOIA2IGT3G5R76IBADMNE/ |
Reference Description | FEDORA FEDORA-2022-68ad89b21c |
Reference URL | https://lists.fedoraproject.org/archives/list/[email protected]/message/HIMDNIUI7GTUEKIBBYYW7OCTJQFPDNXL/ |
Reference Description | FEDORA FEDORA-2022-357cc1a81b |
Reference URL | https://lists.fedoraproject.org/archives/list/[email protected]/message/XO6LIVQS62MI5GG4OVYB5RHVZMYNHAHG/ |
Reference Description | FEDORA FEDORA-2022-2a4ca7b18d |
Tags | Release Notes Third Party Advisory |
Sources | NIST MITRE |