CVE-1999-1379
MediumExploitation Probability (EPSS)
High risk83th percentile - higher than 83% of all known CVEs
Summary
The vulnerability in DNS allows remote attackers to use DNS name servers as traffic amplifiers. An attacker can send a UDP DNS query with a spoofed source address, resulting in more traffic to the victim than was sent by the attacker.
Risk Assessment
Organizations may become targets of DDoS attacks that exploit this vulnerability to generate excessive traffic, potentially leading to service availability disruptions.
Recommendation
It is recommended to monitor DNS traffic and implement query filtering to minimize the risk of DNS servers being used as traffic amplifiers.
Other vulnerabilities in DNS
See all- CVE-2023-50387High
The KeyTrap vulnerability in the DNSSEC protocol allows a remote attacker to cause a Denial of Service (DoS) by sending DNSSEC responses containing many DNSKEY and RRSIG records. This leads to excessive CPU consumption on the DNS server, potentially causing overload.
- CVE-2026-6949Medium
A TSIG packet with name compression can crash DNS. Incorrect size calculations when a TSIG record contains compressed names lead to a large out-of-bounds write, causing a server crash.
- CVE-2026-52684Low
A DNS issue occurs when the authoritative server responds very slowly and records expire in the meantime. In this case, TTL capping is not enforced due to lack of data. This does not happen during normal resolution.
Original NVD description (English source)
DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the victim than was sent by the attacker.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS