CVE-2019-6477

TCP-pipelined queries can bypass tcp-clients limit

High · published November 26, 2019

CVSS v3.1
7.5
EPSS
4%
Percentile
90.6
In the wild
Unconfirmed
What it is

With pipelining enabled each incoming query on a TCP connection requires a similar resource allocation to a query received via UDP or via TCP without pipelining enabled. A client using a TCP-pipelined connection to a server could consume more resources than the server has been provisioned to handle. When a TCP connection with a large number of pipelined queries is closed, the load on the server releasing these multiple resources can cause it to become unresponsive, even for queries that can be answered authoritatively or from cache. (This is most likely to be perceived as an intermittent server problem).

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.04055 · 90.6th percentile
Published
2019-11-26T16:11Z
EPSS history
Timeline
  • 26 NOV 16:11Z
    TCP-pipelined queries can bypass tcp-clients limit
    cvelistv5