Stay Secure with the Latest Linux Advisories

security advisorydenial of serviceubuntu

Ubuntu 22.10: USN-6225-1, Moderate, Knot Resolver DoS Risk

Knot Resolver could be made to crash if it received specially crafted network traffic.. =========================================================================Ubuntu Security Notice USN-6225-1 July 13, 2023 knot-resolver vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.10 - Ubuntu 22.04 LTS (Available with Ubuntu Pro) - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS (Available with Ubuntu Pro) - Ubuntu 16.04 LTS (Available with Ubuntu Pro) Summary: Knot Resolver could be made to crash if it received specially crafted network traffic. Software Description: - knot-resolver: caching, DNSSEC-validating DNS resolver Details: It was discovered that Knot Resolver did not correctly handle certain client options. A remote attacker could send requests to malicous domains and cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.10: knot-resolver 5.5.1-5ubuntu0.22.10.1 Ubuntu 22.04 LTS (Available with Ubuntu Pro): knot-resolver 5.4.4-1ubuntu0.1~esm1 Ubuntu 20.04 LTS: knot-resolver 3.2.1-3ubuntu2.1 Ubuntu 18.04 LTS (Available with Ubuntu Pro): knot-resolver 2.1.1-1ubuntu0.1~esm2 libkres-dev 2.1.1-1ubuntu0.1~esm2 libkres6 2.1.1-1ubuntu0.1~esm2 Ubuntu 16.04 LTS (Available with Ubuntu Pro): knot-resolver 1.0.0~beta3-1ubuntu0.1~esm1 In general, a standard system update will make all the necessary changes. References: CVE-2022-40188 Package Information: https://launchpad.net/ubuntu/+source/knot-resolver/5.5.1-5ubuntu0.22.10.1 https://launchpad.net/ubuntu/+source/knot-resolver/3.2.1-3ubuntu2.1 . A vulnerability in the DNS resolver might allow an attacker to disrupt the service usingcustom requests. Ensure your Debian systems are updated to reduce potential threats.. Knot Resolver, DoS Threat, Ubuntu Security, Network Traffic, DNS Vulnerability. . Severity: Important. LinuxSecurity.com Team

Jul 13, 2023 •Important Ubuntu