Lucene search

K
cvelistRedhatCVELIST:CVE-2019-10190
HistoryJul 16, 2019 - 5:50 p.m.

CVE-2019-10190

2019-07-1617:50:05
CWE-20
redhat
raw.githubusercontent.com
2

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.3%

A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allows remote attackers to bypass DNSSEC validation for non-existence answer. NXDOMAIN answer would get passed through to the client even if its DNSSEC validation failed, instead of sending a SERVFAIL packet. Caching is not affected by this particular bug but see CVE-2019-10191.

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.3%