CVE-2019-10190

🗓️ 16 Jul 2019 17:50:05Reported by redhatType

Vulnerability in DNS resolver component of knot resolver allowing remote attackers to bypass DNSSEC validation

Reporter	Title	Published	Views	Family All 29
AlpineLinux	CVE-2019-10190	16 Jul 201917:50	–	alpinelinux
Cvelist	CVE-2019-10190	16 Jul 201917:50	–	cvelist
Debian	[SECURITY] [DLA 3795-1] knot-resolver security update	26 Apr 202405:50	–	debian
Debian CVE	CVE-2019-10190	16 Jul 201917:50	–	debiancve
Tenable Nessus	Debian dla-3795 : knot-resolver - security update	26 Apr 202400:00	–	nessus
Tenable Nessus	Fedora 29 : knot-resolver (2019-20f95b0b39)	19 Jul 201900:00	–	nessus
Tenable Nessus	Fedora 30 : knot-resolver (2019-fdb50c675d)	19 Jul 201900:00	–	nessus
Tenable Nessus	Ubuntu 20.04 LTS : Knot Resolver vulnerabilities (USN-7047-1)	1 Oct 202400:00	–	nessus
EUVD	EUVD-2019-2213	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 29 Update: knot-resolver-4.1.0-1.fc29	19 Jul 201903:07	–	fedora

NVD

Vulners

Node

nic knot_resolverRange≤3.2.0

nic knot_resolverRange4.0.0–4.1.0

Node

fedoraproject fedoraMatch29

fedoraproject fedoraMatch30

[
  {
    "product": "knot-resolver",
    "vendor": "CZ.NIC",
    "versions": [
      {
        "status": "affected",
        "version": "from 3.2.0 before 4.1.0"
      }
    ]
  }
]

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMSSWBHINIX4WE6UDXWM66L7JYEK6XS6/
lists	www.lists.debian.org/debian-lts-announce/2024/04/msg00017.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZV5YZZ5766UIG2TFLFJL6EESQNAP5X5/
knot-resolver	www.knot-resolver.cz/2019-07-10-knot-resolver-4.1.0.html

21 Nov 2024 04:18Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.17.5

CVSS 35.4

EPSS0.00257

CWE-20