Unrated

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This i...

CVE-2020-12667 First seen on SecPulse May 19, 2020

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2020-12667 knot-resolver Fixed in: 5.1.1-0.1

Original description The description as published by the source.

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory cyber-security-group.cs.tau.ac.il
advisory openwall.com
advisory en.blog.nic.cz
advisory knot-resolver.cz
web lists.debian.org
web lists.fedoraproject.org

Key facts

Severity: Unrated
Published: May 19, 2020
First seen on SecPulse: May 19, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:51