SecuritySpace - CVE-2019-19331

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2019-19331

Description: knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A records can be squashed into one DNS message (limit is 64kB).

Test IDs: 1.3.6.1.4.1.25623.1.0.877170 1.3.6.1.4.1.25623.1.0.877084 1.3.6.1.4.1.25623.1.0.143262

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2019-19331
https://www.knot-resolver.cz/2019-12-04-knot-resolver-4.3.0.html
https://lists.debian.org/debian-lts-announce/2024/04/msg00017.html

CVE ID:	CVE-2019-19331
Description:	knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A records can be squashed into one DNS message (limit is 64kB).
Test IDs:	1.3.6.1.4.1.25623.1.0.877170 1.3.6.1.4.1.25623.1.0.877084 1.3.6.1.4.1.25623.1.0.143262
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2019-19331 https://www.knot-resolver.cz/2019-12-04-knot-resolver-4.3.0.html https://lists.debian.org/debian-lts-announce/2024/04/msg00017.html