CVE-2019-10191 — Improper Input Validation in Knot Resolver
Severity
7.5HIGHNVD
EPSS
0.3%
top 49.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJul 16
Latest updateOct 1
Description
A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state, opening possibility of domain hijack using attacks against insecure DNS protocol.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6
Affected Packages4 packages
Also affects: Fedora 29, 30
🔴Vulnerability Details
4GHSA▶
GHSA-5w8c-g2pj-65rx: A vulnerability was discovered in DNS resolver of knot resolver before version 4↗2022-05-24
OSV▶
CVE-2019-10191: A vulnerability was discovered in DNS resolver of knot resolver before version 4↗2019-07-16
CVEList▶
CVE-2019-10191: A vulnerability was discovered in DNS resolver of knot resolver before version 4↗2019-07-16
📋Vendor Advisories
1Debian▶
CVE-2019-10191: knot-resolver - A vulnerability was discovered in DNS resolver of knot resolver before version 4...↗2019
💬Community
3Bugzilla▶
CVE-2019-10191 knot-resolver: improper input validation in DNS resolver allows remote attacker to poison cache by unsigned negative answer [epel-7]↗2019-07-15
Bugzilla▶
CVE-2019-10191 knot-resolver: improper input validation in DNS resolver allows remote attacker to poison cache by unsigned negative answer [fedora-all]↗2019-07-15
Bugzilla▶
CVE-2019-10191 knot-resolver: improper input validation in DNS resolver allows remote attacker to poison cache by unsigned negative answer↗2019-07-05