← Back

CVE-2020-5591

nvd nist
Published: Jun 5, 2020Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

XACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0 allow remote attackers to cause a denial of service condition resulting in degradation of the recursive resolver's performance or compromising the recursive resolver as a reflector in a reflection attack.

Affected (4)

Products: Xack: Xack Dns
Xack
1 product
Xack Dns
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Xack
Xack Dns
Up to 1.7.18
Xack Dns
From 1.10.0 to 1.10.8
Xack Dns
From 1.11.0 to 1.11.4
Xack Dns
From 1.8.0 to 1.8.23

Related CWEs

CWE-674
Uncontrolled Recursion
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

References (4)

Source: vultures@jpcert.or.jp
MitigationThird Party AdvisoryVDB Entry
Source: vultures@jpcert.or.jp
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.