Search CVE reports


Toggle filters

11 – 14 of 14 results


CVE-2019-19331

Medium priority

Some fixes available 1 of 7

knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU...

1 affected package

knot-resolver

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
knot-resolver Not affected Not affected Not affected Fixed Vulnerable
Show less packages

CVE-2019-10191

Medium priority

Some fixes available 1 of 8

A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state, opening possibility of domain hijack using attacks...

1 affected package

knot-resolver

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
knot-resolver Not affected Not affected Not affected Fixed Vulnerable
Show less packages

CVE-2019-10190

Medium priority

Some fixes available 1 of 6

A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allows remote attackers to bypass DNSSEC validation for non-existence answer. NXDOMAIN answer would get passed...

1 affected package

knot-resolver

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
knot-resolver Not affected Not affected Fixed Not affected
Show less packages

CVE-2018-10920

Medium priority
Vulnerable

Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.

1 affected package

knot-resolver

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
knot-resolver Not affected Not affected Not affected Not affected Vulnerable
Show less packages