openSUSE Security Update : knot (openSUSE-2018-494)

This update for knot fixes the following issues : - CVE-2017-11104: Knot DNS contained a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TS...

openSUSE: Security Advisory for knot (openSUSE-SU-2018:1395-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for knot (moderate)

This update for knot fixes the following issues: - CVE-2017-11104: Knot DNS contained a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSI...

Fedora Update for knot-resolver FEDORA-2018-389bc4e911

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for knot-resolver FEDORA-2018-0c0671072b

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for knot-resolver FEDORA-2018-a120d509ab

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 26 : knot-resolver (2018-0c0671072b)

Knot Resolver 2.3.0 2018-04-23 ================================ Security -------- - fix CVE-2018-1110: denial of service triggered by malformed DNS messages !550, !558, security!2, security!4 - increase resilience against slow lorris attack security!5 Bugfixes -------- - validation: fix SERVFAIL ...

[SECURITY] Fedora 27 Update: knot-resolver-2.3.0-1.fc27

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

[SECURITY] Fedora 26 Update: knot-resolver-2.3.0-1.fc26

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

[SECURITY] Fedora 28 Update: knot-resolver-2.3.0-1.fc28

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

Knot DNS <= 1.5.2 DoS Vulnerability

Knot DNS is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:knot:dns";...

CVE-2014-0486

Knot DNS before 1.5.2 allows remote attackers to cause a denial of service application crash via a crafted DNS message...

Code injection

Knot DNS before 1.5.2 allows remote attackers to cause a denial of service application crash via a crafted DNS message...

CVE-2014-0486

Knot DNS before 1.5.2 allows remote attackers to cause a denial of service application crash via a crafted DNS message...

CVE-2014-0486

Knot DNS before 1.5.2 allows remote attackers to cause a denial of service application crash via a crafted DNS message...

DEBIAN-CVE-2014-0486

Knot DNS before 1.5.2 allows remote attackers to cause a denial of service application crash via a crafted DNS message...

CVE-2014-0486

Knot DNS before 1.5.2 allows remote attackers to cause a denial of service application crash via a crafted DNS message...

CVE-2014-0486

Knot DNS allows remote DoS via a crafted DNS message in versions before 1.5.2, causing application crash. The issue affects Knot DNS when processing DNS messages; no remediation or mitigation details are provided in the supplied documents.

CVE-2014-0486

Knot DNS before 1.5.2 allows remote attackers to cause a denial of service application crash via a crafted DNS message...

Fedora 27 : knot-resolver (2018-fe5a6ed3b7)

Knot Resolver 2.1.0 2018-02-16 ================================ Incompatible changes -------------------- - stats: remove tracking of expiring records predict uses another way - systemd: re-use a single kresd.socket and kresd-tls.socket - tasentinel: implement protocol...