CVE-2014-0486

Knot DNS before 1.5.2 allows remote attackers to cause a denial of service application crash via a crafted DNS message...

Fedora 27 : knot-resolver (2018-fe5a6ed3b7)

Knot Resolver 2.1.0 2018-02-16 ================================ Incompatible changes -------------------- - stats: remove tracking of expiring records predict uses another way - systemd: re-use a single kresd.socket and kresd-tls.socket - tasentinel: implement protocol...

Fedora Update for knot-resolver FEDORA-2018-844a1e9778

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 26 : knot-resolver (2018-844a1e9778)

Knot Resolver 2.1.0 2018-02-16 ================================ Incompatible changes -------------------- - stats: remove tracking of expiring records predict uses another way - systemd: re-use a single kresd.socket and kresd-tls.socket - tasentinel: implement protocol...

Fedora Update for knot-resolver FEDORA-2018-fe5a6ed3b7

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 27 Update: knot-resolver-2.1.0-1.fc27

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

[SECURITY] Fedora 26 Update: knot-resolver-2.1.0-1.fc26

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

Knot Resolver Input Validation Vulnerability

Knot Resolver is a DNS resolver that includes DNS resolver libraries and daemons.DNSSEC validators components is one of the DNS Secure Extended Validation components. An input validation vulnerability exists in the DNSSEC validators component in Knot Resolver versions prior to 1.5.2. An attacker...

DEBIAN-CVE-2018-1000002

Improper input validation bugs in DNSSEC validators components in Knot Resolver prior version 1.5.2 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...

CVE-2018-1000002

Improper input validation bugs in DNSSEC validators components in Knot Resolver prior version 1.5.2 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...

CVE-2018-1000002

Improper input validation bugs in DNSSEC validators components in Knot Resolver prior version 1.5.2 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...

CVE-2018-1000002

Improper input validation bugs in DNSSEC validators components in Knot Resolver prior version 1.5.2 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...

Input validation

Improper input validation bugs in DNSSEC validators components in Knot Resolver prior version 1.5.2 allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay...

CVE-2018-1000002

Knot Resolver prior to 1.5.2 contains an insufficient DNSSEC validation flaw (CVE-2018-1000002) that could allow an attacker in MITM to deny existence of some data by forging packets. Fedora advisories and OpenVAS/Nessus entries reference CVE-2018-1000002 and show updates (e.g., knot-resolver pac...

Knot DNS 2.4.x < 2.4.4 / 2.5.x < 2.5.2 TSIG Authentication Bypass Vulnerability (CVE-2017-11104)

The Knot DNS server running on the remote host is version 2.4.x prior to 2.4.5 or 2.5.x prior to 2.5.2. It is, therefore, affected by a TSIG authentication bypass vulnerability. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid106196; scriptversion"1.5";...

Student Cracks Inca Knot Code

Interesting...

Fedora 27 : knot / knot-resolver (2017-7a7ea1cf50)

"Major update for Knot DNS and Knot Resolver : Knot Resolver 1.5.0 2017-11-02 ================================ Bugfixes -------- - fix loading modules on Darwin Improvements ------------ - new module tasignalquery supporting Signaling Trust Anchor Knowledge using Keytag Query RFC 8145 section 5...

knot-dns/fuzz_zscanner: Stack-buffer-overflow in parse

Project: https://gitlab.labs.nic.cz/knot/knot-dns Detailed report: https://oss-fuzz.com/testcase?key=4889981102325760 Project: knot-dns Fuzzer: libFuzzerknot-dnsfuzzzscanner Fuzz target binary: fuzzzscanner Job Type: libfuzzerasanknot-dns Platform Id: linux Crash Type: Stack-buffer-overflow WRITE...

knot-dns/fuzz_zscanner: Index-out-of-bounds in parse

Project: https://gitlab.labs.nic.cz/knot/knot-dns Detailed report: https://oss-fuzz.com/testcase?key=4734243205808128 Project: knot-dns Fuzzer: libFuzzerknot-dnsfuzzzscanner Fuzz target binary: fuzzzscanner Job Type: libfuzzerubsanknot-dns Platform Id: linux Crash Type: Index-out-of-bounds Crash...

knot-dns/fuzz_zscanner: Use-of-uninitialized-value in parse

Project: https://gitlab.labs.nic.cz/knot/knot-dns Detailed report: https://oss-fuzz.com/testcase?key=6125247553077248 Project: knot-dns Fuzzer: libFuzzerknot-dnsfuzzzscanner Fuzz target binary: fuzzzscanner Job Type: libfuzzermsanknot-dns Platform Id: linux Crash Type: Use-of-uninitialized-value...