Nic vulnerabilities
We track 3 vulnerabilities in Nic products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 14, 2024.
Latest Nic vulnerabilities
- 7.5 High severity
Enterprise Linux: Allocation of Resources Without Limits or Throttling
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when ther
- 7.5 High severity
Knot Resolver: Allocation of Resources Without Limits or Throttling
Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connect
- 7.5 High severity
Knot Resolver: Inefficient Algorithmic Complexity
Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets.