CVE-2022-40188
Fixed in a distro release EPSS 2%CVSS 7.5
Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets.
Products: nic knot_resolver, fedoraproject fedora, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | knot-resolver | 3.2.1-3+deb10u1 |
| Debian 12 | knot-resolver | 5.5.3-1 |
| Debian 13 | knot-resolver | 5.5.3-1 |
| Debian 14 | knot-resolver | 5.5.3-1 |
| Ubuntu 20.04 LTS | knot-resolver | 3.2.1-3ubuntu2.1 |
| Ubuntu Pro 16.04 LTS | knot-resolver | 1.0.0~beta3-1ubuntu0.1~esm1 |
| Ubuntu Pro 18.04 LTS | knot-resolver | 2.1.1-1ubuntu0.1~esm2 |
| Ubuntu Pro 22.04 LTS | knot-resolver | 5.4.4-1ubuntu0.1~esm1 |