CVE-2026-66374
Fixed in a distro release EPSS <1%CVSS 8.1
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.
Products: nic knot_resolver
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 14 | knot-resolver | 6.4.1-1 |
| Ubuntu 20.04 LTS | knot-resolver | no fix |
| Ubuntu 24.04 LTS | knot-resolver | no fix |
| Ubuntu 26.04 LTS | knot-resolver | no fix |
| Ubuntu Pro 16.04 LTS | knot-resolver | no fix |
| Ubuntu Pro 18.04 LTS | knot-resolver | no fix |
| Ubuntu Pro 22.04 LTS | knot-resolver | no fix |