Approved changes feed: RSS · Atom

cpe:2.3:a:nic:knot_resolver:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorNic (1b58cdc8-36c9-5095-a0a2-262a2887be90)
ProductKnot Resolver (d6c5c6bb-120d-5020-84a4-840413989c38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/knot-resolver purl2cpe 2026-06-01 10:16:02.724219
pkg:deb/ubuntu/knot-resolver purl2cpe 2026-06-01 10:16:02.724222
pkg:docker/cznic/knot-resolver purl2cpe 2026-06-01 10:16:02.724225
pkg:github/cz-nic/knot-resolver purl2cpe 2026-06-01 10:16:02.724227
pkg:rpm/fedora/knot-resolver purl2cpe 2026-06-01 10:16:02.724230
pkg:rpm/opensuse/knot-resolver purl2cpe 2026-06-01 10:16:02.724233

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-12667 vulnerable 2026-06-08 05:17:58.718732 Details available
Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
Published: 2020-05-19T00:00:00.000Z
Updated: 2024-08-04T12:04:22.538Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.