PT-2019-15812 · Cz.Nic+2 · Knot Resolver+2

Publicado 2019-12-16 · Atualizado 2024-10-01 · CVE-2019-19331

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions knot-resolver versions prior to 4.3.0

Description The issue allows for denial of service through high CPU utilization. This occurs when DNS replies contain a large number of resource records, which can be processed inefficiently. In extreme cases, processing a single uncached message can take several CPU seconds. For example, a DNS message can contain a few thousand A records, with a limit of 64kB.

Recommendations For versions prior to 4.3.0, update to version 4.3.0 or later to resolve the issue. As a temporary workaround, consider restricting the size of DNS messages or limiting the number of resource records processed to minimize the risk of high CPU utilization.

Exploit

Correção

DoS

Improper Resource Release

Enumeração de Fraquezas

CWE-404

CWE-407

Identificadores relacionados

CVE-2019-19331

DLA-3795-1

USN-7047-1

Produtos afetados

Linuxmint

Ubuntu

Knot Resolver

Referências · 26

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19331 · Exploit
• https://lists.debian.org/debian-lts-announce/2024/04/msg00017.html · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-19331 · Aviso do Fabricante
• https://knot-resolver.cz/2019-12-04-knot-resolver-4.3.0.html · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2020-12667 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-19331 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10190 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-19331 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-7047-1 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19331 · Nota de Segurança
• https://osv.dev/vulnerability/DLA-3795-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-19331 · Nota de Segurança
• https://openwall.com/lists/oss-security/2019/12/04/4 · Nota
• https://ubuntu.com/security/CVE-2019-10191 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12667 · Nota de Segurança