Vulnerabilities

TI-2017-08166 CVE-2017-11104 · GHSA-xhxv-xr8w-7xpm

Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol…

LOW 31

Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key name and algorithm to bypass TSIG authentication if no additional ACL res…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02681 Published 2017-07-08 No fix listed CWE-20

TI-2016-05295 CVE-2016-6171 · GHSA-935v-fg4c-f9fr

Knot DNS before 2.3.0 allows remote DNS servers to cause a denial of service (memory…

MEDIUM 42

Knot DNS before 2.3.0 allows remote DNS servers to cause a denial of service (memory exhaustion and slave server crash) via a large zone transfer for (1) DDNS, (2) AXFR, or (3) IXFR.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02799 Published 2017-02-09 No fix listed CWE-400

Vulnerabilities

Filters

Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol…

Knot DNS before 2.3.0 allows remote DNS servers to cause a denial of service (memory…