Debian/knot-resolver: medium 6.8

Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.

Action: Upgrade knot-resolver to 2.4.1-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2018-10920#Debian:14/knot-resolver
• https://security-tracker.debian.org/tracker/CVE-2018-10920

published 2018-08-02T13:29:00.220Z · modified 2026-10-23T18:03:53.420582977Z · JSON