CVE-2019-19331 HIGH

CVE-2019-19331

Vendor Cz.nic

Product knot-resolver

Weakness CWE-407

Published December 16, 2019

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

7.5/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A records can be squashed into one DNS message (limit is 64kB).

Key dates

02Disclosure timeline

December 16, 2019 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-19331 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/407.html

Related vulnerabilities

04Related CVE

CVE-2022-22153 SRX Series and MX Series with SPC3: A high percentage of fragments might lead to high latency or packet drops CVE-2026-6042 musl libc GB18030 4-byte Decoder iconv.c iconv algorithmic complexity CVE-2025-14822 DoS from quadratic complexity in model.ParseHashtags CVE-2025-55304 Exiv2 has quadratic performance in ICC profile parsing in JpegBase::readMetadata CVE-2023-46136 Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning