GitHub Advisoryadvisory · Go

GHSA-p55x-7x9v-q8m4 Denial of Service in miekg-dns

HIGH Published 2021-06-29 Modified 2021-05-20 Official page ↗
Aliases
CVE-2017-15133
Ecosystem
Go
Packages
github.com/miekg/dns
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2021-05-20

Affected packages

• Go github.com/miekg/dns: < 1.0.4 → fixed in 1.0.4

Description

A denial of service flaw was found in miekg-dns before 1.0.4. A remote attacker could use carefully timed TCP packets to block the DNS server from accepting new connections.

Related

Alias · CVE (1)

  • CVE-2017-15133 A denial of service flaw was found in miekg-dns before 1.0.4. vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References