Knot Resolver
Approved changes feed: RSS · Atom
cpe:2.3:a:nic:knot_resolver:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Nic (1b58cdc8-36c9-5095-a0a2-262a2887be90) |
|---|---|
| Product | Knot Resolver (d6c5c6bb-120d-5020-84a4-840413989c38) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/knot-resolver |
purl2cpe | 2026-06-01 10:16:02.724221 |
pkg:deb/ubuntu/knot-resolver |
purl2cpe | 2026-06-01 10:16:02.724223 |
pkg:docker/cznic/knot-resolver |
purl2cpe | 2026-06-01 10:16:02.724226 |
pkg:github/cz-nic/knot-resolver |
purl2cpe | 2026-06-01 10:16:02.724229 |
pkg:rpm/fedora/knot-resolver |
purl2cpe | 2026-06-01 10:16:02.724231 |
pkg:rpm/opensuse/knot-resolver |
purl2cpe | 2026-06-01 10:16:02.724234 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-50387 |
vulnerable | 2026-06-08 06:16:16.107121 |
Details available
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. One of the concerns is that, when there is a zone with many DNSKEY and RRSIG records, the protocol specification implies that an algorithm must evaluate all combinations of DNSKEY and RRSIG records.
Published: 2024-02-14T00:00:00.000Z
Updated: 2025-11-04T18:20:34.949Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46317 |
vulnerable | 2026-06-08 06:12:44.689779 |
Details available
Knot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical responses from servers.
Published: 2023-10-22T00:00:00.000Z
Updated: 2024-09-12T17:45:59.356Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26249 |
vulnerable | 2026-06-08 05:57:38.971637 |
Details available
Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service. Specifically, a single client query may lead to a hundred TCP connection attempts if a DNS server closes connections without providing a response.
Published: 2023-02-21T00:00:00.000Z
Updated: 2025-03-14T18:32:24.994Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40188 |
vulnerable | 2026-06-08 05:48:24.140229 |
Details available
Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets.
Published: 2022-09-23T00:00:00.000Z
Updated: 2025-05-27T14:55:35.830Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32983 |
vulnerable | 2026-06-08 05:44:46.093531 |
Details available
Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters.
Published: 2022-06-20T15:05:01.000Z
Updated: 2024-08-03T07:54:03.478Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40083 |
vulnerable | 2026-06-08 05:35:16.779656 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-12667 |
vulnerable | 2026-06-08 05:17:58.720208 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19331 |
vulnerable | 2026-06-08 05:13:22.135889 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10191 |
vulnerable | 2026-06-08 05:12:22.471435 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10190 |
vulnerable | 2026-06-08 05:12:22.470826 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1110 |
vulnerable | 2026-06-08 05:11:16.922069 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10920 |
vulnerable | 2026-06-08 05:10:37.380937 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000002 |
vulnerable | 2026-06-08 05:10:25.265088 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5661 |
vulnerable | 2026-06-08 05:04:53.006903 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.