p PatchFirst

CVE-2018-1000002

CVE-2018-1000002

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay.

CVSS 3.7 · Low · EPSS 1.1% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • knot-resolver Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.5.2-1

    Update to 1.5.2-1

  • knot-resolver Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.5.2-1

    Update to 1.5.2-1

  • knot-resolver Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.5.2-1

    Update to 1.5.2-1

Original sources

Check your server →