CVE-2020-10772 Detail
This vulnerability is currently awaiting analysis.
Description
An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an incoming query into a large number of queries directed to a target, even with a lower amplification ratio compared to versions of Unbound that shipped before the mentioned erratum. This issue is about the incomplete fix for CVE-2020-12662, and it does not affect upstream versions of Unbound.
Severity
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-406 | Insufficient Control of Network Message Volume (Network Amplification) | Red Hat, Inc. |
| CWE-400 | Uncontrolled Resource Consumption | Red Hat, Inc. |
Change History
0 change records found show changes
Quick Info
CVE Dictionary Entry:
CVE-2020-10772
NVD Published Date:
11/27/2020
NVD Last Modified:
11/28/2020
Source:
Red Hat, Inc.