CVE-2019-19331highCWE-407

CVE-2019-19331: high-severity vulnerability in CZ.NIC knot-resolver

Published · Updated

Follow this CVE+ Monitor knot-resolver+ Monitor knot-resolver

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 2.1%
knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A records can be squashed into one DNS message (limit is 64kB).
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
CZ.NIC · knot-resolver
Related CVEs — CZ.NIC knot-resolver

In the same product, most dangerous first.

CVE-2019-10190MEDIUMCVE-2019-10190EPSS 2.0%CVE-2019-10191MEDIUMCVE-2019-10191EPSS 1.9%