Lucene search
+L

429 matches found

OpenVAS
OpenVAS
•added 2017/07/21 12:00 a.m.•11 views

Fedora Update for knot-resolver FEDORA-2017-92643d70b7

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2017/07/21 12:00 a.m.•24 views

Fedora Update for knot-resolver FEDORA-2017-081fc9ad77

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2017/07/21 12:00 a.m.•15 views

Fedora 26 : knot-resolver (2017-e6aaef4475)

build experimental command line interface 'kresc' Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

5.5AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2017/07/21 12:00 a.m.•17 views

Fedora 24 : knot-resolver (2017-081fc9ad77)

Update to upstream version 1.3.1. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

5.5AI score
SaveExploits0References1
Fedora
Fedora
•added 2017/07/20 8:54 p.m.•14 views

[SECURITY] Fedora 25 Update: knot-2.4.5-1.fc25

Knot DNS is a high-performance authoritative DNS server implementation...

2.7AI score
SaveExploits0
Fedora
Fedora
•added 2017/07/20 6:49 p.m.•18 views

[SECURITY] Fedora 24 Update: knot-resolver-1.3.1-1.fc24

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

0.5AI score
SaveExploits0
Fedora
Fedora
•added 2017/07/20 6:48 p.m.•20 views

[SECURITY] Fedora 24 Update: knot-2.4.5-1.fc24

Knot DNS is a high-performance authoritative DNS server implementation...

2.7AI score
SaveExploits0
Fedora
Fedora
•added 2017/07/20 3:56 p.m.•29 views

[SECURITY] Fedora 26 Update: knot-resolver-1.3.1-1.fc26

The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as...

0.5AI score
SaveExploits0
Fedora
Fedora
•added 2017/07/20 3:56 p.m.•30 views

[SECURITY] Fedora 26 Update: knot-2.4.5-1.fc26

Knot DNS is a high-performance authoritative DNS server implementation...

5.9CVSS2.7AI score0.02681EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2017/07/17 12:00 a.m.•17 views

Fedora 26 : knot-resolver (2017-45ebf1e164)

new upstream release - security fix + security: Knot Resolver 1.2.0 and higher could return AD flag for insecure answer if the daemon received answer with invalid RRSIG several times in a row. + fix: layer/iterate: some improvements in cname chain unrolling + fix: layer/validate: fix duplicate...

5.5AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2017/07/17 12:00 a.m.•61 views

Debian DSA-3910-1 : knot - security update

Clement Berthaux from Synaktiv discovered a signature forgery vulnerability in knot, an authoritative-only DNS server. This vulnerability allows an attacker to bypass TSIG authentication by sending crafted DNS packets to a server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...

5.9CVSS5.9AI score0.02681EPSS
SaveExploits1References5
Debian
Debian
•added 2017/07/14 7:34 p.m.•62 views

[SECURITY] [DSA 3910-1] knot security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3910-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez July 14, 2017 https://www.debian.org/security/faq -...

5.9CVSS5.6AI score0.02681EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2017/07/14 12:00 a.m.•30 views

Debian Security Advisory DSA 3910-1 (knot - security update)

Clement Berthaux from Synaktiv discovered a signature forgery vulnerability in knot, an authoritative-only DNS server. This vulnerability allows an attacker to bypass TSIG authentication by sending crafted DNS packets to a server. OpenVAS Vulnerability Test $Id: deb3910.nasl 6764 2017-07-20...

4.3CVSS0.3AI score0.02681EPSS
SaveExploits1References1
OSV
OSV
•added 2017/07/14 12:00 a.m.•24 views

DSA-3910-1 knot - security update

Bulletin has no description...

5.9CVSS5.5AI score0.02681EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2017/07/13 12:00 a.m.•20 views

Debian: Security Advisory (DSA-3910-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.9CVSS5.7AI score0.02681EPSS
SaveExploits1References3
OpenVAS
OpenVAS
•added 2017/07/11 12:00 a.m.•29 views

Knot DNS Server Security Bypass Vulnerability (Jun 2017)

A flaw was found in the way Knot handled TSIG authentication for dynamic updates. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

5.9CVSS5.7AI score0.02681EPSS
SaveExploits1References1
CNVD
CNVD
•added 2017/07/10 12:00 a.m.•12 views

Knot DNS TSIG Authentication Bypass Vulnerability

Knot DNS is a high-performance DNS server developed by the Czech Network Information Center CZ.NIC that supports all the key features of the DNS system, such as zone switching, dynamic updates and DNS Security Extensions DNSSEC. A security vulnerability exists in Knot DNS. An attacker could explo...

5.9CVSS6.8AI score0.02681EPSS
SaveExploits1References1
Prion
Prion
•added 2017/07/08 10:29 a.m.•25 views

Design/Logic Flaw

Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSIG validity period check...

4.3CVSS5.7AI score0.02681EPSS
SaveExploits1References9Affected Software2
NVD
NVD
•added 2017/07/08 10:29 a.m.•18 views

CVE-2017-11104

Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSIG validity period check...

5.9CVSS5.7AI score0.02681EPSS
SaveExploits1References9
UbuntuCve
UbuntuCve
•added 2017/07/08 10:29 a.m.•31 views

CVE-2017-11104

Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL restrictions are set, because of an improper TSIG validity period check...

5.9CVSS6.2AI score0.02681EPSS
SaveExploits1References4
Rows per page
Query Builder