knot-resolver

15 results · Feed

• High 8.1
  CVE-2026-66374 Public exploit

  Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) rec…

  NIC Knot Resolver knot-resolver knot-resolver Debian Ubuntu
  Jul 25, 2026
• High 7.5
  CVE-2023-50868 Public exploit EPSS 74%

  The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote att…

  bind9 bind9 bind unbound Debian Ubuntu Alpine
  Feb 14, 2024
• High 7.5
  CVE-2023-50387 Public exploit EPSS 100%

  Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to …

  bind9 bind9 bind unbound Debian Ubuntu Alpine
  Feb 14, 2024
• Unscored —
  CVE-2023-46317

  Knot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical responses from servers.

  knot-resolver knot-resolver Debian Ubuntu
  Oct 22, 2023
• High 7.5
  CVE-2023-26249

  Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially …

  knot-resolver knot-resolver Debian Ubuntu
  Feb 21, 2023
• High 7.5
  CVE-2022-40188

  Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmi…

  knot-resolver knot-resolver knot-resolver Debian Ubuntu Alpine
  Sep 23, 2022
• Unscored —
  CVE-2022-32983

  Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filte…

  knot-resolver knot-resolver Debian Ubuntu
  Jun 20, 2022
• Unscored —
  CVE-2021-40083

  Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case (NSEC3 wi…

  knot-resolver Debian
  Aug 25, 2021
• Unscored —
  CVE-2018-1110

  A flaw was found in knot-resolver before version 2.3.0. Malformed DNS messages may cause denial of service.

  knot-resolver knot-resolver knot-resolver Debian Ubuntu Alpine
  Mar 30, 2021
• High 7.5
  CVE-2020-12667

  Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, ak…

  knot-resolver knot-resolver knot-resolver Debian Ubuntu Alpine
  May 19, 2020
• High 7.5
  CVE-2019-19331

  knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with ve…

  CZ.NIC knot-resolver knot-resolver knot-resolver Debian Ubuntu Alpine
  Dec 16, 2019
• Medium 6.3
  CVE-2019-10191

  A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to d…

  CZ.NIC knot-resolver knot-resolver knot-resolver Debian Ubuntu Alpine
  Jul 16, 2019
• Medium 5.4
  CVE-2019-10190

  A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allo…

  CZ.NIC knot-resolver knot-resolver knot-resolver Debian Ubuntu Alpine
  Jul 16, 2019
• High 7.5
  CVE-2018-10920 Public exploit

  Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison …

  CZ.NIC knot-resolver knot-resolver knot-resolver Debian Ubuntu
  Aug 2, 2018
• Unscored —
  CVE-2018-1000002

  Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker in…

  knot-resolver Debian
  Jan 22, 2018