]> git.ipfire.org Git - thirdparty/knot-resolver.git/commitdiff
projects / thirdparty / knot-resolver.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | combined (merge: 79179c6 7b31e7e)
Merge: mitigate CVE-2023-50387 "KeyTrap" docs-develop-mast-tzgd0f/deployments/3232
authorVladimír Čunát <vladimir.cunat@nic.cz>
Tue, 13 Feb 2024 11:43:16 +0000 (12:43 +0100)
committerVladimír Čunát <vladimir.cunat@nic.cz>
Tue, 13 Feb 2024 11:43:16 +0000 (12:43 +0100)
DNSSEC verification complexity could be exploited to exhaust CPU resources and stall DNS resolvers.

Solution boils down mainly to limiting crypto-validations per packet.


Trivial merge
Mirror of https://gitlab.nic.cz/knot/knot-resolver.git