CVE-2019-19331 - CVE House
Back to Database
Status published High CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service...

Vulnerability Description

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A records can be squashed into one DNS message (limit is 64kB).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-19331

Credits & Attribution

No credits recorded in the NVD database.

References

More from CZ.NIC

View All →
CVE-2019-10191
A vulnerability was discovered in DNS resolver of knot resolver...
Medium 6.3
CVE-2019-10190
A vulnerability was discovered in DNS resolver component of knot...
Medium 5.4

Affected Vendor

Affected Software

knot-resolver
Vulnerable Versions:
4.3.0

Timeline

Official Publish: December 16th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-407

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.