Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 554
Alerts This Week
Warning Icon 1 554

Ubuntu 22.10: USN-6225-1, Moderate, Knot Resolver DoS Risk

ubuntu
Calendar Grey July 13, 2023
Dist Ubuntu Esm H88
A vulnerability in the DNS resolver might allow an attacker to disrupt the service using custom requests. Ensure your Debian systems are updated to reduce potential threats.
Knot Resolver could be made to crash if it received specially crafted network traffic.

Summary

Knot Resolver could be made to crash if it received specially crafted

network traffic.

Software Description:

- knot-resolver: caching, DNSSEC-validating DNS resolver

Details:

It was discovered that Knot Resolver did not correctly handle certain

client options. A remote attacker could send requests to malicous domains

and cause a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service ubuntu malicious traffic knot resolver

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
   knot-resolver                   5.5.1-5ubuntu0.22.10.1

Ubuntu 22.04 LTS (Available with Ubuntu Pro):
   knot-resolver                   5.4.4-1ubuntu0.1~esm1

Ubuntu 20.04 LTS:
   knot-resolver                   3.2.1-3ubuntu2.1

Ubuntu 18.04 LTS (Available with Ubuntu Pro):
   knot-resolver                   2.1.1-1ubuntu0.1~esm2
   libkres-dev                     2.1.1-1ubuntu0.1~esm2
   libkres6                        2.1.1-1ubuntu0.1~esm2

Ubuntu 16.04 LTS (Available with Ubuntu Pro):
   knot-resolver                   1.0.0~beta3-1ubuntu0.1~esm1

In general, a standard system update will make all the necessary changes.

References

CVE-2022-40188

Severity
important
Lowest
Low
Medium
High
Critical

July 13, 2023

Topics%20covered

Topics Covered

security advisory denial of service ubuntu malicious traffic knot resolver

Package Information

https://launchpad.net/ubuntu/+source/knot-resolver/5.5.1-5ubuntu0.22.10.1
https://launchpad.net/ubuntu/+source/knot-resolver/3.2.1-3ubuntu2.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.