PT-2017-8922 · Cz.Nic · Knot Dns

Florian Weimer · Published 2017-02-09 · Updated 2020-06-11 · CVE-2016-6171

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Knot DNS versions prior to 2.3.0

Description The issue allows remote DNS servers to cause a denial of service, resulting in memory exhaustion and slave server crash. This can be achieved via a large zone transfer for DDNS, AXFR, or IXFR.

Recommendations For versions prior to 2.3.0, update to version 2.3.0 or later to resolve the issue.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2016-6171

Affected Products

Knot Dns

References · 15

• https://github.com/sischkg/xfer-limit/blob/master/README.md · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2016-6171 · Security Note
• https://ubuntu.com/security/CVE-2016-6171 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-6171 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-6171 · Security Note
• https://gitlab.labs.nic.cz/labs/knot/issues/464 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-6171 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-6171 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-6171 · Vendor Advisory
• http://openwall.com/lists/oss-security/2016/07/06/4 · Note
• https://gitlab.labs.nic.cz/labs/knot/blob/c546a70563ef4c7badb7cb5bdf6d1ba8e7adae82/NEWS · Note
• https://gitlab.labs.nic.cz/labs/knot/merge_requests/541 · Note
• https://lists.dns-oarc.net/pipermail/dns-operations/2016-July/015058.html · Note
• http://securityfocus.com/bid/91678 · Note
• http://openwall.com/lists/oss-security/2016/07/06/3 · Note