openSUSE Security Update : knot (openSUSE-2020-1085)

This update for knot fixes the following issues : - CVE-2017-11104: Fixed an improper implementation of TSIG protocol which could have allowed an attacker with a valid key name and algorithm to bypass TSIG authentication boo1047841. C Tenable Network Security, Inc. The descriptive text and packag...

openSUSE: Security Advisory for knot (openSUSE-SU-2020:1086-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE: Security Advisory for knot (openSUSE-SU-2020:1085-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:1085-1 Security update for knot

This update for knot fixes the following issues: - CVE-2017-11104: Fixed an improper implementation of TSIG protocol which could have allowed an attacker with a valid key name and algorithm to bypass TSIG authentication boo1047841...

Security update for knot (moderate)

openSUSE Security Update: Security update for knot Announcement ID: openSUSE-SU-2020:1085-1 Rating: moderate References: 1047841 Cross-References: CVE-2017-11104 Affected Products: openSUSE Leap 15.1 An update that fixes one vulnerability is now available. Description: This update for knot fixes...

Security update for knot (moderate)

openSUSE Security Update: Security update for knot Announcement ID: openSUSE-SU-2020:1086-1 Rating: moderate References: 1047841 Cross-References: CVE-2017-11104 Affected Products: openSUSE Leap 15.2 An update that fixes one vulnerability is now available. Description: This update for knot fixes...

Fedora 32 : knot-resolver (2020-bf68101ad3)

fixes CVE-2020-12667 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security,...

Fedora: Security Advisory for knot-resolver (FEDORA-2020-bf68101ad3)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Knot Resolver < 5.1.1 NXNSAttack Vulnerability

Knot Resolver is prone to a denial of service vulnerability NXNSAttack. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Knot Resolver Resource Management Error Vulnerability

Knot Resolver is an open source caching DNS resolver written in C and LuaJIT from the CZ.NIC Association of the Czech Republic. A resource management error vulnerability exists in Knot Resolver versions prior to 5.1.1. An attacker could exploit this vulnerability to cause a denial of service with...

DEBIAN-CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

Code injection

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

CVE-2020-12667

Knot Resolver (the Knot-resolver project) is affected by CVE-2020-12667. The vulnerability allows traffic amplification via a crafted DNS answer from an attacker-controlled server, triggered by random subdomains in the NSDNAME field of NS records (NXNSAttack). Affected versions are Knot Resolver ...

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records...

PT-2020-13194 · Cz.Nic +3 · Knot Resolver +3

Name of the Vulnerable Software and Affected Versions: Knot Resolver versions prior to 5.1.1 Description: The issue allows traffic amplification via a crafted DNS answer from an attacker-controlled server, also known as an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME ...