CVE-2018-1110

A flaw was found in knot-resolver before version 2.3.0. Malformed DNS messages may cause denial of service...

CVE-2018-1110

A flaw was found in knot-resolver before version 2.3.0. Malformed DNS messages may cause denial of service...

CVE-2018-1110

Knot Resolver vulnerability CVE-2018-1110 affects knot-resolver up to version 2.3.0. The flaw allows denial of service via malformed DNS messages. Severity: CVSS v3.1 high (Network, Low attack complexity, no privileges required, availability impact in the HIGH range). Affected software: knot-reso...

CVE-2018-1110

A flaw was found in knot-resolver before version 2.3.0. Malformed DNS messages may cause denial of service...

CVE-2018-1110: Improper Input Validation

A flaw was found in knot-resolver before version 2.3.0. Malformed DNS messages may cause denial of service...

PT-2021-8703

Name of the Vulnerable Software and Affected Versions knot-resolver versions prior to 2.3.0 Description A flaw in the knot-resolver may cause denial of service when it encounters malformed DNS messages. Recommendations For versions prior to 2.3.0, update to version 2.3.0 or later to resolve the...

CZ.NIC knot-resolver 输入验证错误漏洞

Knot Resolver is an open source caching DNS resolver written in C and LuaJIT from the Czech Republic's CZ.NIC Cz.nic association. A security vulnerability exists in knot-resolver versions prior to 2.3.0, which can be exploited by attackers to cause a denial of service...

PT-2021-4070

Name of the Vulnerable Software and Affected Versions avahi version 0.8-5 Description A flaw in the avahi service allows a local attacker to crash the service by requesting hostname resolutions for invalid hostnames through the avahi socket or dbus methods. This is due to a reachable assertion in...

[SECURITY] Fedora 34 Update: bind-9.16.11-5.fc34

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

Important: bind security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...

Debian DLA-2556-1 : unbound1.9 security update

Several security vulnerabilities have been corrected in unbound, a validating, recursive, caching DNS resolver. Support for the unbound DNS server has been resumed, the sources can be found in the unbound1.9 source package. CVE-2020-12662 Unbound has Insufficient Control of Network Message Volume...

Debian: Security Advisory (DLA-2556-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-0334

In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product:...

DEBIAN-CVE-2020-14312

A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option local-service is not...

CVE-2020-14312

A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option local-service is not...

UBUNTU-CVE-2020-14312

A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option local-service is not...

CVE-2020-14312

A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option local-service is not...

CVE-2020-14312

CVE-2020-14312 affects dnsmasq in Fedora versions prior to 31 and all Red Hat Enterprise Linux versions. The issue is a default configuration flaw where dnsmasq listens on any interface and does not enable the local-service option, effectively making it an open resolver accessible from arbitrary ...

CVE-2020-14312: Improper Access Control

A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queries from addresses outside of its local subnet. In particular, the option local-service is not...

NSA Suggests Enterprises Use 'Designated' DNS-over-HTTPS' Resolvers

The U.S. National Security Agency NSA on Friday said DNS over HTTPS DoH — if configured appropriately in enterprise environments — can help prevent "numerous" initial access, command-and-control, and exfiltration techniques used by threat actors. "DNS over Hypertext Transfer Protocol over Transpo...