diff options
| author | Vladimír Čunát <vladimir.cunat@nic.cz> | 2024-02-13 12:43:16 +0100 |
|---|---|---|
| committer | Vladimír Čunát <vladimir.cunat@nic.cz> | 2024-02-13 12:43:16 +0100 |
| commit | 867b5f284fbd0ec1efcf293feef6c89b4313c4ae (patch) | |
| tree | 5a805e5c7af4fa361db69fa22e6aea9a54014928 /meson.build | |
| parent | Merge CVE-2023-50868: NSEC3 closest encloser proof can exhaust CPU (diff) | |
| parent | update NEWS with KeyTrap (diff) | |
| download | knot-resolver-867b5f284fbd0ec1efcf293feef6c89b4313c4ae.tar.xz knot-resolver-867b5f284fbd0ec1efcf293feef6c89b4313c4ae.zip | |
Merge: mitigate CVE-2023-50387 "KeyTrap"
DNSSEC verification complexity could be exploited to exhaust CPU resources and stall DNS resolvers.
Solution boils down mainly to limiting crypto-validations per packet.
Diffstat (limited to 'meson.build')
0 files changed, 0 insertions, 0 deletions