PT-2023-20562

CVE-2023-26249

Published

2023-02-21

Updated

2025-03-14

Description by

CVSS 3.1

7.5

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Knot Resolver versions prior to 5.6.0

Description The issue enables attackers to consume the resolver's resources, launching amplification attacks and potentially causing a denial of service. A single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response.

Recommendations For versions prior to 5.6.0, update to version 5.6.0 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Qifan Zhang

Xiang Li

Xuesong Bai

Vendors

Affected products

Weakness enumeration