tocsin

Alpine/knot-resolver: high 7.5

A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allows remote attackers to bypass DNSSEC validation for non-existence answer. NXDOMAI

Action: Upgrade knot-resolver to 4.1.0-r0 or later.

Affected

introducedfixedlast affected
04.1.0-r0-

Fixed versions

4.1.0-r0

Sources

published · modified · JSON