High DLA-3795-1 4 CVEs

knot-resolver - security update

Published Apr 26, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	knot-resolver	3.2.1-3+deb10u2

Vulnerabilities 4

High 7.5

CVE-2019-19331

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with ve…

CZ.NIC knot-resolver knot-resolver knot-resolver Debian Ubuntu Alpine

Dec 16, 2019
High 7.5

CVE-2020-12667

Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, ak…

knot-resolver knot-resolver knot-resolver Debian Ubuntu Alpine

May 19, 2020
Medium 6.3

CVE-2019-10191

A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to d…

CZ.NIC knot-resolver knot-resolver knot-resolver Debian Ubuntu Alpine

Jul 16, 2019
Medium 5.4

CVE-2019-10190

A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allo…

CZ.NIC knot-resolver knot-resolver knot-resolver Debian Ubuntu Alpine

Jul 16, 2019