pkg:Debian/knot-resolver

All known vulnerabilities

• HIGH7.5CVE-2023-46317knot-resolver - security update
  from 0
• HIGH7.5CVE-2023-46317knot-resolver - security update
  from 0, < 5.6.0-1+deb12u1
• HIGH7.5CVE-2023-26249Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of…
  from 0
• HIGH7.5knot-resolver - security update
  from 0
• HIGH7.5knot-resolver - security update
  from 0, < 3.2.1-3+deb10u1
• HIGH7.5Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case (NSEC3 with too many iteratio…
  from 0, < 5.3.1-1+deb11u1
• HIGH7.5A flaw was found in knot-resolver before version 2.3.0.
  from 0, < 2.3.0-1
• HIGH7.5Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" is…
  from 0, < 5.1.1-0.1
• HIGH7.5knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization.
  from 0, < 5.0.1-1
• HIGH7.5A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secu…
  from 0, < 5.0.1-1
• HIGH7.5knot-resolver - security update
  from 0, < 5.0.1-1
• HIGH7.5knot-resolver - security update
  from 0, < 3.2.1-3+deb10u2
• MEDIUM6.8Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.
  from 0, < 2.4.1-1
• MEDIUM5.3Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters.
  from 0
• LOW3.7Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker in man-in-the-middle p…
  from 0, < 1.5.2-1