Lucene search
+L

243 matches found

Cvelist
Cvelist
added 2022/06/20 3:5 p.m.27 views

CVE-2022-32983

Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters...

5.5AI score0.00779EPSS
Exploits0References2
CVE
CVE
added 2022/06/20 3:5 p.m.78 views

CVE-2022-32983

The CVE-2022-32983 issue affects Knot Resolver up to version 5.5.1, where DNS cache poisoning could occur when an attempt is made to limit forwarding actions by filters. Root cause details in connected sources indicate a vulnerability in handling forwarding/filter constraints that can lead to cac...

5.3CVSS5.6AI score0.00779EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2022/06/20 3:5 p.m.57 views

CVE-2022-32983

Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters...

5.3CVSS5.7AI score0.00779EPSS
Exploits0
OSV
OSV
added 2022/06/20 3:5 p.m.19 views

CVE-2022-32983

Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters...

5.3CVSS6.8AI score0.00779EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/06/20 12:0 a.m.8 views

PT-2022-21620 · Unknown +2 · Knot Resolver +2

Name of the Vulnerable Software and Affected Versions: Knot Resolver versions through 5.5.1 Description: The issue may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters. Recommendations: For versions through 5.5.1, update to a version that contains a fix fo...

7.5CVSS6AI score0.01521EPSS
Exploits0References21
CNNVD
CNNVD
added 2022/06/20 12:0 a.m.6 views

Knot Resolver 安全漏洞

Knot Resolver is a caching DNS resolver implementation that includes a resolver library and daemon. A security vulnerability exists in Knot Resolver versions prior to 5.5.1, which stems from a possible DNS cache poisoning when attempting to limit forwarding operations via a filter...

5.3CVSS6.8AI score0.00779EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2022/05/21 12:17 a.m.48 views

CVE-2019-10190

A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allows remote attackers to bypass DNSSEC validation for non-existence answer. NXDOMAIN answer would get passed through to the client even if its DNSSEC validation failed, instead of...

7.5CVSS5.2AI score0.01993EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2022/05/20 11:48 p.m.33 views

CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A...

7.5CVSS2AI score0.02166EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2022/05/20 11:32 p.m.22 views

CVE-2018-10920

Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache...

7.5CVSS4.9AI score0.03239EPSS
Exploits0References1
Veracode
Veracode
added 2021/09/08 6:45 p.m.20 views

Denial Of Service

knot-resolver is vulnerable to denial of service. The vulnerability exists due to an assertion failure...

7.5CVSS2.6AI score0.01421EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2021/08/25 1:15 a.m.13 views

CVE-2021-40083

Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case NSEC3 with too many iterations used for a positive wildcard proof...

7.5CVSS0.01421EPSS
Exploits0References1
OSV
OSV
added 2021/08/25 1:15 a.m.5 views

DEBIAN-CVE-2021-40083

Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case NSEC3 with too many iterations used for a positive wildcard proof...

7.5CVSS7.5AI score0.01421EPSS
Exploits0References1
OSV
OSV
added 2021/08/25 1:15 a.m.18 views

CVE-2021-40083

Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case NSEC3 with too many iterations used for a positive wildcard proof...

7.5CVSS6.9AI score
Exploits0References1
Prion
Prion
added 2021/08/25 1:15 a.m.20 views

Design/Logic Flaw

Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case NSEC3 with too many iterations used for a positive wildcard proof...

5CVSS7.5AI score0.01421EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2021/08/25 1:15 a.m.4 views

UBUNTU-CVE-2021-40083

Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case NSEC3 with too many iterations used for a positive wildcard proof...

7.5CVSS7.1AI score0.01421EPSS
Exploits0References3
CVE
CVE
added 2021/08/25 12:21 a.m.70 views

CVE-2021-40083

Knot Resolver before 5.3.2 is prone to an assertion failure that can be triggered remotely in a specific edge case: NSEC3 with too many iterations used for a positive wildcard proof. The vulnerability is documented across multiple sources in this CVE, confirming the affected software (Knot Resolv...

7.5CVSS7.4AI score0.01421EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/08/25 12:21 a.m.22 views

CVE-2021-40083

Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case NSEC3 with too many iterations used for a positive wildcard proof...

7.7AI score0.01421EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2021/08/25 12:21 a.m.27 views

CVE-2021-40083

Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case NSEC3 with too many iterations used for a positive wildcard proof...

7.5CVSS7.5AI score0.01421EPSS
Exploits0
CNNVD
CNNVD
added 2021/08/25 12:0 a.m.6 views

Knot Resolver 安全漏洞

Knot Resolver is a cached DNS resolver implementation that includes a resolver library and daemon. A security vulnerability exists in Knot Resolver versions prior to 5.3.2, which can be exploited by attackers to conduct malicious behavior...

7.5CVSS7.3AI score0.01421EPSS
Exploits0References1
CNVD
CNVD
added 2021/04/14 12:0 a.m.9 views

CZ.NIC knot-resolver input validation error vulnerability

Knot Resolver is an open source caching DNS resolver written in C and LuaJIT from the Czech Republic's CZ.NIC Cz.nic association. A security vulnerability exists in knot-resolver versions prior to 2.3.0, which can be exploited by attackers to cause a denial of service...

7.5CVSS6.5AI score0.0111EPSS
Exploits0References1
Rows per page
Query Builder