CVE-2020-5591 - Vulnerability Details - OpenCVE

XACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0 allow remote attackers to cause a denial of service condition resulting in degradation of the recursive resolver's performance or compromising the recursive resolver as a reflector in a reflection attack.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Xack	Xack Dns

Configuration 1 [-]

OR	cpe:2.3:a:xack:xack_dns::::::::
	cpe:2.3:a:xack:xack_dns::::::::
	cpe:2.3:a:xack:xack_dns::::::::
	cpe:2.3:a:xack:xack_dns::::::::

No data.

References

Link	Providers
https://jvn.jp/en/jp/JVN40208370/index.html
https://xack.co.jp/info/?ID=622

History

No history.

MITRE

Status: PUBLISHED

Assigner: jpcert

Published: 2020-06-05T10:05:15

Updated: 2024-08-04T08:30:24.525Z

Reserved: 2020-01-06T00:00:00

Link: CVE-2020-5591

Vulnrichment

No data.

NVD

Status : Modified

Published: 2020-06-05T18:15:14.293

Modified: 2024-11-21T05:34:19.600

Link: CVE-2020-5591

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "XACK DNS", "vendor": "XACK, Inc.", "versions": [{"status": "affected", "version": "1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0"}]}], "descriptions": [{"lang": "en", "value": "XACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0 allow remote attackers to cause a denial of service condition resulting in degradation of the recursive resolver's performance or compromising the recursive resolver as a reflector in a reflection attack."}], "problemTypes": [{"descriptions": [{"description": "Denial-of-service (DoS)", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-06-05T10:05:15", "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://xack.co.jp/info/?ID=622"}, {"tags": ["x_refsource_MISC"], "url": "https://jvn.jp/en/jp/JVN40208370/index.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "vultures@jpcert.or.jp", "ID": "CVE-2020-5591", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "XACK DNS", "version": {"version_data": [{"version_value": "1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0"}]}}]}, "vendor_name": "XACK, Inc."}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "XACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0 allow remote attackers to cause a denial of service condition resulting in degradation of the recursive resolver's performance or compromising the recursive resolver as a reflector in a reflection attack."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Denial-of-service (DoS)"}]}]}, "references": {"reference_data": [{"name": "https://xack.co.jp/info/?ID=622", "refsource": "MISC", "url": "https://xack.co.jp/info/?ID=622"}, {"name": "https://jvn.jp/en/jp/JVN40208370/index.html", "refsource": "MISC", "url": "https://jvn.jp/en/jp/JVN40208370/index.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T08:30:24.525Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://xack.co.jp/info/?ID=622"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://jvn.jp/en/jp/JVN40208370/index.html"}]}]}, "cveMetadata": {"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "assignerShortName": "jpcert", "cveId": "CVE-2020-5591", "datePublished": "2020-06-05T10:05:15", "dateReserved": "2020-01-06T00:00:00", "dateUpdated": "2024-08-04T08:30:24.525Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:xack:xack_dns:*:*:*:*:*:*:*:*", "matchCriteriaId": "5E95A315-EB25-455C-9134-F36FACC2F931", "versionEndIncluding": "1.7.18", "vulnerable": true}, {"criteria": "cpe:2.3:a:xack:xack_dns:*:*:*:*:*:*:*:*", "matchCriteriaId": "06152647-9C06-41DA-908B-EBE2DA082FCE", "versionEndIncluding": "1.8.23", "versionStartIncluding": "1.8.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:xack:xack_dns:*:*:*:*:*:*:*:*", "matchCriteriaId": "D1EC9051-3E81-4FD1-AEAE-D4E6C709C084", "versionEndIncluding": "1.10.8", "versionStartIncluding": "1.10.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:xack:xack_dns:*:*:*:*:*:*:*:*", "matchCriteriaId": "A142B778-D19F-48D9-9214-89F442B9886A", "versionEndIncluding": "1.11.4", "versionStartIncluding": "1.11.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "XACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0 allow remote attackers to cause a denial of service condition resulting in degradation of the recursive resolver's performance or compromising the recursive resolver as a reflector in a reflection attack."}, {"lang": "es", "value": "XACK DNS versiones 1.11.0 hasta 1.11.4, versiones 1.10.0 hasta 1.10.8, versiones 1.8.0 hasta 1.8.23, versiones 1.7.0 hasta 1.7.18 y versiones anteriores a 1.7.0, permiten a atacantes remotos causar una condici\u00f3n denegaci\u00f3n de servicio resultando en una degradaci\u00f3n del rendimiento del resolutor recursivo o comprometiendo el resolutor recursivo como un reflector en un ataque de reflexi\u00f3n"}], "id": "CVE-2020-5591", "lastModified": "2024-11-21T05:34:19.600", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2020-06-05T18:15:14.293", "references": [{"source": "vultures@jpcert.or.jp", "tags": ["Mitigation", "Third Party Advisory", "VDB Entry"], "url": "https://jvn.jp/en/jp/JVN40208370/index.html"}, {"source": "vultures@jpcert.or.jp", "tags": ["Vendor Advisory"], "url": "https://xack.co.jp/info/?ID=622"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Third Party Advisory", "VDB Entry"], "url": "https://jvn.jp/en/jp/JVN40208370/index.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://xack.co.jp/info/?ID=622"}], "sourceIdentifier": "vultures@jpcert.or.jp", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-674"}], "source": "nvd@nist.gov", "type": "Primary"}]}