Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-8ks2-kv5d-gkdc
Vulnerability ID VCID-8ks2-kv5d-gkdc
Aliases CVE-2019-19331
Summary knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A records can be squashed into one DNS message (limit is 64kB).
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.00489 https://api.first.org/data/v1/epss?cve=CVE-2019-19331
epss 0.00489 https://api.first.org/data/v1/epss?cve=CVE-2019-19331
epss 0.00489 https://api.first.org/data/v1/epss?cve=CVE-2019-19331
epss 0.00489 https://api.first.org/data/v1/epss?cve=CVE-2019-19331
epss 0.00489 https://api.first.org/data/v1/epss?cve=CVE-2019-19331
epss 0.00489 https://api.first.org/data/v1/epss?cve=CVE-2019-19331
epss 0.00489 https://api.first.org/data/v1/epss?cve=CVE-2019-19331
epss 0.00489 https://api.first.org/data/v1/epss?cve=CVE-2019-19331
epss 0.00489 https://api.first.org/data/v1/epss?cve=CVE-2019-19331
epss 0.00489 https://api.first.org/data/v1/epss?cve=CVE-2019-19331
epss 0.00489 https://api.first.org/data/v1/epss?cve=CVE-2019-19331
epss 0.00489 https://api.first.org/data/v1/epss?cve=CVE-2019-19331
epss 0.00489 https://api.first.org/data/v1/epss?cve=CVE-2019-19331
epss 0.00489 https://api.first.org/data/v1/epss?cve=CVE-2019-19331
epss 0.00489 https://api.first.org/data/v1/epss?cve=CVE-2019-19331
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2019-19331
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19331
946181 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946181
USN-7047-1 https://usn.ubuntu.com/7047-1/
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.65416
EPSS Score 0.00489
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:33:44.970020+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0