490 matches found
CVE-2018-10920_PoC
CVE-2018-10920PoC Knot Resolver CVE-2018-10920 / DO NOT ABUSE...
CVE-2017-3143
TSIG Bypass exploit Exploit for CVE-2017-3143 in Bind and CVE-2017-11104 in Knot DNS. See https://www.synacktiv.com/ressources/CVE-2017-3143BIND9TSIGdynamicupdatesvulnerabilitySynacktiv.pdf for more info. Author Clément Berthaux - clement dot berthaux at synacktiv dot com...
kresd DNS Resolver Code Execution
The vulnerability of the kresd DNS resolver’s knot resolver component is related to incorrect configuration data input. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
knot-doq
Knot Resolver 6.3.0 — DNS-over-QUIC heap overflow → RCE PoC Proof-of-concept for a remotely triggerable heap buffer overflow in Knot Resolver's DNS-over-QUIC DoQ receive path that yields remote code execution as the knot-resolver service user. Component: kresd DoQ listener daemon/quicconn.c...
[SECURITY] Fedora 44 Update: knot-3.5.8-1.fc44
Knot DNS is a high-performance authoritative DNS server implementation...
[SECURITY] Fedora 45 Update: knot-3.5.8-1.fc45
Knot DNS is a high-performance authoritative DNS server implementation...
Fedora 45 : knot (2026-e7ca68120c)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e7ca68120c advisory. Update to 3.5.8 security fixes in XDP, DDNS, and TSIG. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
Fedora 44 : knot (2026-4782ac1f8b)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4782ac1f8b advisory. Update to 3.5.8 security fixes in XDP, DDNS, and TSIG. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
Enc53: DNSSEC-Anchored Stateless Tickets for Post-Quantum Authoritative DNS
DNSSEC authenticates RRsets, but does not provide endpoint authentication or channel security. DNS-over-TLS DoT and DNS-over-QUIC DoQ can facilitate such needs, but were designed for the stub-to-resolver hop, where stable long-lived connections amortize the expensive initial setup. The...
[SECURITY] Fedora 43 Update: knot-3.4.11-1.fc43
Knot DNS is a high-performance authoritative DNS server implementation...
[SECURITY] Fedora 44 Update: knot-3.5.7-1.fc44
Knot DNS is a high-performance authoritative DNS server implementation...
Fedora 43 : knot (2026-4857ca6db8)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4857ca6db8 advisory. New upstream release with security fixes. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...
Fedora 44 : knot (2026-85369e2e3a)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-85369e2e3a advisory. New upstream release with security fixes. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...
CVE-2026-66374
A flaw was found in Knot Resolver. This vulnerability, a heap-based buffer overflow, exists in the DNS-over-QUIC DoQ receive path. A remote attacker could exploit this flaw to achieve remote code execution, allowing them to run arbitrary commands on the affected system...
CVE-2026-39155
A flaw was found in Knot DNS. The mod-onlinesign component incorrectly computes the next NSEC Next Secure owner name. This can lead to an overly broad authenticated denial interval, allowing DNS Domain Name System resolvers that use aggressive negative caching to incorrectly generate negative...
[SECURITY] Fedora 44 Update: knot-3.5.6-1.fc44
Knot DNS is a high-performance authoritative DNS server implementation...
Fedora 44 : knot (2026-6f4584d9b3)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6f4584d9b3 advisory. new upstream release including a security fix for ACL processing Tenable has extracted the preceding description block directly from the Fedora security...
CVE-2026-66374
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ DNS-over-QUIC receive path...
