CVE Catalog

CVE-1999-1379

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
2.61%

83th percentile - higher than 83% of all known CVEs

Summary

The vulnerability in DNS allows remote attackers to use DNS name servers as traffic amplifiers. An attacker can send a UDP DNS query with a spoofed source address, resulting in more traffic to the victim than was sent by the attacker.

Risk Assessment

Organizations may become targets of DDoS attacks that exploit this vulnerability to generate excessive traffic, potentially leading to service availability disruptions.

Recommendation

It is recommended to monitor DNS traffic and implement query filtering to minimize the risk of DNS servers being used as traffic amplifiers.

Original NVD description (English source)

DNS allows remote attackers to use DNS name servers as traffic amplifiers via a UDP DNS query with a spoofed source address, which produces more traffic to the victim than was sent by the attacker.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS