429 matches found
Fedora Update for knot-resolver FEDORA-2017-92643d70b7
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for knot-resolver FEDORA-2017-081fc9ad77
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 26 : knot-resolver (2017-e6aaef4475)
build experimental command line interface 'kresc' Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...
Fedora 24 : knot-resolver (2017-081fc9ad77)
Update to upstream version 1.3.1. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...
[SECURITY] Fedora 25 Update: knot-2.4.5-1.fc25
Knot DNS is a high-performance authoritative DNS server implementation...
[SECURITY] Fedora 24 Update: knot-resolver-1.3.1-1.fc24
The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...
[SECURITY] Fedora 24 Update: knot-2.4.5-1.fc24
Knot DNS is a high-performance authoritative DNS server implementation...
[SECURITY] Fedora 26 Update: knot-resolver-1.3.1-1.fc26
The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...
[SECURITY] Fedora 26 Update: knot-2.4.5-1.fc26
Knot DNS is a high-performance authoritative DNS server implementation...
Fedora 26 : knot-resolver (2017-45ebf1e164)
new upstream release - security fix + security: Knot Resolver 1.2.0 and higher could return AD flag for insecure answer if the daemon received answer with invalid RRSIG several times in a row. + fix: layer/iterate: some improvements in cname chain unrolling + fix: layer/validate: fix duplicate...
Debian DSA-3910-1 : knot - security update
Clement Berthaux from Synaktiv discovered a signature forgery vulnerability in knot, an authoritative-only DNS server. This vulnerability allows an attacker to bypass TSIG authentication by sending crafted DNS packets to a server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...
[SECURITY] [DSA 3910-1] knot security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3910-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez July 14, 2017 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3910-1 (knot - security update)
Clement Berthaux from Synaktiv discovered a signature forgery vulnerability in knot, an authoritative-only DNS server. This vulnerability allows an attacker to bypass TSIG authentication by sending crafted DNS packets to a server. OpenVAS Vulnerability Test $Id: deb3910.nasl 6764 2017-07-20...
DSA-3910-1 knot - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3910-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Knot DNS Server Security Bypass Vulnerability (Jun 2017)
A flaw was found in the way Knot handled TSIG authentication for dynamic updates. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Knot DNS TSIG Authentication Bypass Vulnerability
Knot DNS is a high-performance DNS server developed by the Czech Network Information Center CZ.NIC that supports all the key features of the DNS system, such as zone switching, dynamic updates and DNS Security Extensions DNSSEC. A security vulnerability exists in Knot DNS. An attacker could explo...
Design/Logic Flaw
Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSIG validity period check...
CVE-2017-11104
Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSIG validity period check...
CVE-2017-11104
Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSIG validity period check...