Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 0 articles for you...
87
security advisorydenial of servicesecurity updateDebian: DSA-5633-1 Severe Threat: Knot Resolver Denial of Service
It was discovered that malformed DNSSEC records within a DNS zone could result in denial of service against Knot Resolver, a caching, DNSSEC- validating DNS resolver. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5633-1
Feb 27, 2024
•Critical
Debian
172
security advisorydenial of serviceubuntuUbuntu 22.10: USN-6225-1, Moderate, Knot Resolver DoS Risk
Knot Resolver could be made to crash if it received specially crafted network traffic.. =========================================================================Ubuntu Security Notice USN-6225-1 July 13, 2023 knot-resolver vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.10 - Ubuntu 22.04 LTS (Available with Ubuntu Pro) - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS (Available with Ubuntu Pro) - Ubuntu 16.04 LTS (Available with Ubuntu Pro) Summary: Knot Resolver could be made to crash if it received specially crafted network traffic. Software Description: - knot-resolver: caching, DNSSEC-validating DNS resolver Details: It was discovered that Knot Resolver did not correctly handle certain client options. A remote attacker could send requests to malicous domains and cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.10: knot-resolver 5.5.1-5ubuntu0.22.10.1 Ubuntu 22.04 LTS (Available with Ubuntu Pro): knot-resolver 5.4.4-1ubuntu0.1~esm1 Ubuntu 20.04 LTS: knot-resolver 3.2.1-3ubuntu2.1 Ubuntu 18.04 LTS (Available with Ubuntu Pro): knot-resolver 2.1.1-1ubuntu0.1~esm2 libkres-dev 2.1.1-1ubuntu0.1~esm2 libkres6 2.1.1-1ubuntu0.1~esm2 Ubuntu 16.04 LTS (Available with Ubuntu Pro): knot-resolver 1.0.0~beta3-1ubuntu0.1~esm1 In general, a standard system update will make all the necessary changes. References: CVE-2022-40188 Package Information: https://launchpad.net/ubuntu/+source/knot-resolver/5.5.1-5ubuntu0.22.10.1 https://launchpad.net/ubuntu/+source/knot-resolver/3.2.1-3ubuntu2.1 . A vulnerability in the DNS resolver might allow an attacker to disrupt the service usingcustom requests. Ensure your Debian systems are updated to reduce potential threats.. Knot Resolver, DoS Threat, Ubuntu Security, Network Traffic, DNS Vulnerability. . Severity: Important. LinuxSecurity.com Team
Jul 13, 2023
•Important
Ubuntu
89
security advisorycriticalFedoraFedora 32: FEDORA-2020-bf68101ad3 Critical Vulnerability in Knot Resolver
- fixes CVE-2020-12667. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-bf68101ad3 2020-05-28 04:13:58.091808 --------------------------------------------------------------------------------Name : knot-resolver Product : Fedora 32 Version : 5.1.1 Release : 1.fc32 URL : https://www.knot-resolver.cz/ Summary : Caching full DNS Resolver Description : The Knot Resolver is a DNSSEC-enabled caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as local caching resolver. To start using it, start a single kresd instance: $ systemctl start
May 28, 2020
•Critical
Fedora
89
security advisoryupdatecriticalFedora 28: 2018-c894f896fd Critical: Knot Resolver DNS Downgrade Fix
Knot Resolver 2.4.0 (2018-07-03) changes -------------------- - minimal libknot version is now 2.6.7 to pull in latest fixes (#366) Security -------- - fix a rare case of zones incorrectly dowgraded to insecure status (!576) New features ------------ - TLS session resumption (RFC 5077), both server and client (!585, #105) (disabled when. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-c894f896fd 2018-07-12 14:18:11.697524 --------------------------------------------------------------------------------Name : knot-resolver Product : Fedora 28 Version : 2.4.0 Release : 1.fc28 URL : https://www.knot-resolver.cz/ Summary : Caching full DNS Resolver Description : The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as local caching resolver. To start using it, start a single kresd instance: $ systemctl start
Jul 12, 2018
•Critical
Fedora
89
security advisorydenial of servicesecurity updateFedora 28 FEDORA-2018-389bc4e911 Moderate Knot Resolver Denial Of Service
Knot Resolver 2.3.0 (2018-04-23) -------- - fix CVE-2018-1110: denial of service triggered by malformed DNS messages (!550, !558, security!2, security!4) - increase resilience against slow lorris attack (security!5) Bugfixes -------- - validation: fix SERVFAIL in case of CNAME to NXDOMAIN in a single zone (!538) - validation: fix SERVFAIL for. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-389bc4e911 2018-05-09 21:21:50.031636 --------------------------------------------------------------------------------Name : knot-resolver Product : Fedora 28 Version : 2.3.0 Release : 1.fc28 URL : https://www.knot-resolver.cz/ Summary : Caching full DNS Resolver Description : The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as local caching resolver. To start using it, start a single kresd instance: $ systemctl start
May 09, 2018
•Important
Fedora
89
security advisoryFedoracritical updateFedora 25: 2017-92643d70b7 Critical: knot-resolver DoS Mitigation
Update to upstream version 1.3.1.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-92643d70b7 2017-07-20 13:50:35.706261 --------------------------------------------------------------------------------Name : knot-resolver Product : Fedora 25 Version : 1.3.1 Release : 1.fc25 URL : https://www.knot-resolver.cz/ Summary : Caching full DNS Resolver Description : The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as local caching resolver. To start using it, just start the local DNS socket: BEWARE: Because of https://bugzilla.redhat.com/show_bug.cgi?id=1366968 you need to switch your system to SELinux permissive mode. --------------------------------------------------------------------------------Update Information: Update to upstream version 1.3.1. --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade knot-resolver' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jul 20, 2017
•Critical
Fedora
89
security advisorymoderateFedoraFedora 24: FEDORA-2017-081fc9ad77 Moderate: Knot Resolver Security Update
Update to upstream version 1.3.1.. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2017-081fc9ad77 2017-07-20 13:50:14.517600 --------------------------------------------------------------------------------Name : knot-resolver Product : Fedora 24 Version : 1.3.1 Release : 1.fc24 URL : https://www.knot-resolver.cz/ Summary : Caching full DNS Resolver Description : The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as local caching resolver. To start using it, just start the local DNS socket: BEWARE: Because of https://bugzilla.redhat.com/show_bug.cgi?id=1366968 you need to switch your system to SELinux permissive mode. --------------------------------------------------------------------------------Update Information: Update to upstream version 1.3.1. --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade knot-resolver' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Jul 20, 2017
Fedora
89
security advisoryupdateFedoraFedora 25: Knot Resolver Update Addresses Security Issues and Enhancements
new upstream release + security: Knot Resolver 1.2.0 and higher could return AD flag for insecure answer if the daemon received answer with invalid RRSIG several times in a row. + fix: layer/iterate: some improvements in cname chain unrolling + fix: layer/validate: fix duplicate records in AUTHORITY section in case + fix: of WC expansion proof + fix: lua: do *not* truncate cache size to. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2017-df53d02da7 2017-03-20 22:11:58.760895 -------------------------------------------------------------------------------- Name : knot-resolver Product : Fedora 25 Version : 1.2.4 Release : 1.fc25 URL : https://www.knot-resolver.cz/ Summary : Caching full DNS Resolver Description : The Knot DNS Resolver is a caching full resolver implementation written in C and LuaJIT, including both a resolver library and a daemon. Modular architecture of the library keeps the core tiny and efficient, and provides a state-machine like API for extensions. The package is pre-configured as local caching resolver. To start using it, just start the local DNS socket: BEWARE: Because of https://bugzilla.redhat.com/show_bug.cgi?id=1366968 you need to switch your system to SELinux permissive mode. -------------------------------------------------------------------------------- Update Information: new upstream release + security: Knot Resolver 1.2.0 and higher could return AD flag for insecure answer if the daemon received answer with invalid RRSIG several times in a row. + fix: layer/iterate: some improvements in cname chain unrolling + fix: layer/validate: fix duplicate records in AUTHORITY section in case + fix: of WC expansion proof + fix: lua: do *not* truncate cache size to unsigned + fix: forwarding mode: correctly forward +cd flag + fix: fix a potential memory leak + fix: don't treat answers that contain DS non-existance proof as insecure + fix: don't store NSEC3 and their signatures in thecache + fix: layer/iterate: when processing delegations, check if qname is at or below new authority + enhancement: modules/policy: allow QTRACE policy to be chained with other policies + enhancement: hints.add_hosts(path): a new property + enhancement: module: document the API and simplify the code + enhancement: policy.MIRROR: support IPv6 link-local addresses + enhancement: policy.FORWARD: support IPv6 link-local addresses + enhancement: add net.outgoing_{v4,v6} to allow specifying address to use for connections -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade knot-resolver' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Mar 21, 2017
•Important
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!