VDB
BDU%3A2020-00083
BDU%3A2020-00083
PUBLISHED
CVSS 6.5 MEDIUM
Уязвимость DNS-преобразователя knot resolver, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю преобразовать защищённый через DNSSEC домен до состояния незащищённого DNSSEC
Risk Scores
CVSS 2.0
6.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fedora Project, Knot-resolver | Fedora, knot resolver |
Timeline
- Jan 15, 2020 CVE Published
References
- https://cxsecurity.com/cveshow/CVE-2019-10191/ url
- https://www.opennet.ru/opennews/art.shtml?num=51131 url
- https://nvd.nist.gov/vuln/detail/CVE-2019-10191 url
- https://www.knot-resolver.cz/2019-07-10-knot-resolver-4.1.0.html advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TMSSWBHINIX4WE6UDXWM66L7JYEK6XS6/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZV5YZZ5766UIG2TFLFJL6EESQNAP5X5/ advisory