Weakness (CWE)
CWE-675: Multiple Operations on Resource in Single-Operation Context
Class Draft
The product performs the same operation on a resource two or more times, when the operation should only be applied once.
Source: MITRE CWE-675
1 result · Clear filters · Feed
-
Low 3.7
'serve-expired' can bypass Unbound 'wait-limit'
In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on the 'wait-limit' counter per client IP essentially bypassing one of the counter measures that was introduced for DNSBomb (…