CVE-2023-26249
CVE-2023-26249
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response.
CVSS 7.5 · High · EPSS 0.7% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
knot-resolver Debian:12
- Affected ranges
- ECOSYSTEM: < 5.6.0-1
Update to 5.6.0-1
knot-resolver Debian:13
- Affected ranges
- ECOSYSTEM: < 5.6.0-1
Update to 5.6.0-1
knot-resolver Debian:14
- Affected ranges
- ECOSYSTEM: < 5.6.0-1
Update to 5.6.0-1
knot-resolver Ubuntu:Pro:16.04:LTS
- Versions
- 1.0.0~beta2-123-g6134920-1
- 1.0.0~beta3-1
- 1.0.0~beta3-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
knot-resolver Ubuntu:Pro:18.04:LTS
- Versions
- 1.3.3-1
- 1.5.0-4
- 1.5.1-1
- 1.5.2-1
- 2.0.0-3
- 2.1.0-1
- 2.1.0-2
- 2.1.1-1
- 2.1.1-1ubuntu0.1~esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
knot-resolver Ubuntu:20.04:LTS
- Versions
- 3.2.1-3
- 3.2.1-3ubuntu1
- 3.2.1-3ubuntu2
- 3.2.1-3ubuntu2.1
- 3.2.1-3ubuntu2.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
knot-resolver Ubuntu:Pro:22.04:LTS
- Versions
- 5.3.1-1
- 5.4.2-1
- 5.4.3-1
- 5.4.4-1
- 5.4.4-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published