CVE-2026-66374
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for knot-resolver in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 3
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.
Knot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical responses from servers.
Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters.
Check your installed stack and versions against the current vulnerability feeds.