knot-resolver

8 results · Clear filters · Feed

• High 8.1
  CVE-2026-66374 Public exploit

  Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) rec…

  NIC Knot Resolver knot-resolver knot-resolver Debian Ubuntu
  Jul 25, 2026
• High 7.5
  CVE-2023-50868 Public exploit EPSS 74%

  The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote att…

  bind9 bind9 bind unbound Debian Ubuntu Alpine
  Feb 14, 2024
• High 7.5
  CVE-2023-50387 Public exploit EPSS 100%

  Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to …

  bind9 bind9 bind unbound Debian Ubuntu Alpine
  Feb 14, 2024
• High 7.5
  CVE-2023-26249

  Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially …

  knot-resolver knot-resolver Debian Ubuntu
  Feb 21, 2023
• High 7.5
  CVE-2022-40188

  Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmi…

  knot-resolver knot-resolver knot-resolver Debian Ubuntu Alpine
  Sep 23, 2022
• High 7.5
  CVE-2020-12667

  Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, ak…

  knot-resolver knot-resolver knot-resolver Debian Ubuntu Alpine
  May 19, 2020
• High 7.5
  CVE-2019-19331

  knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with ve…

  CZ.NIC knot-resolver knot-resolver knot-resolver Debian Ubuntu Alpine
  Dec 16, 2019
• High 7.5
  CVE-2018-10920 Public exploit

  Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison …

  CZ.NIC knot-resolver knot-resolver knot-resolver Debian Ubuntu
  Aug 2, 2018