CVE-2022-32983
published 2022-06-20CVE-2022-32983: Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters.
PriorityP423medium5.3CVSS 3.1
AVNACLPRNUINSUCNILAN
EPSS
0.76%
54.8th percentile
Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | knot-resolver | — | — |
| nic | knot_resolver | <= 5.5.1 | — |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
osv5.3MEDIUM
vendor_debian5.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-p3g6-9xqh-3vvh: Knot Resolver through 5
ghsa_unreviewed·2022-06-21
CVE-2022-32983 [MEDIUM] CWE-290 GHSA-p3g6-9xqh-3vvh: Knot Resolver through 5
Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters.
OSV
CVE-2022-32983: Knot Resolver through 5
osv·2022-06-20·CVSS 5.3
CVE-2022-32983 [MEDIUM] CVE-2022-32983: Knot Resolver through 5
Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters.
Debian
CVE-2022-32983: knot-resolver - Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attem...
vendor_debian·2022·CVSS 5.3
CVE-2022-32983 [MEDIUM] CVE-2022-32983: knot-resolver - Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attem...
Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
Krebs
Wormable Flaw, 0days Lead Sept. 2022 Patch Tuesday
blogs_krebs·2022-09-14·CVSS 7.8
[HIGH] Wormable Flaw, 0days Lead Sept. 2022 Patch Tuesday
This month’s Patch Tuesday offers a little something for everyone, including security updates for a zero-day flaw in Microsoft Windows that is under active attack, and another Windows weakness experts say could be used to power a fast-spreading computer worm. Also, Apple has also quashed a pair of zero-day bugs affecting certain macOS and iOS users, and released iOS 16 , which offers a new privacy and security feature called “ Lockdown Mode .” And Adobe axed 63 vulnerabilities in a range of products.
Microsoft today released software patches to plug at least 64 security holes in Windows and related products. Worst in terms of outright scariness is CVE-2022-37969 , which is a “privilege escalation” weakness in the Windows Common Log File System Driver that allows attackers to gain SYSTEM-l
Bugzilla
CVE-2022-32983 knot-resolver: DNS cache poisoning [epel-all]
bugzilla·2022-06-20·CVSS 5.3
CVE-2022-32983 [MEDIUM] CVE-2022-32983 knot-resolver: DNS cache poisoning [epel-all]
CVE-2022-32983 knot-resolver: DNS cache poisoning [epel-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora EPEL. Wh
https://github.com/CZ-NIC/knot-resolver/commit/ccb9d9794db5eb757c33becf65cb1cf48ecfd968https://knot-resolver.readthedocs.io/en/stable/modules-policy.html#forwardinghttps://github.com/CZ-NIC/knot-resolver/commit/ccb9d9794db5eb757c33becf65cb1cf48ecfd968https://knot-resolver.readthedocs.io/en/stable/modules-policy.html#forwarding
2022-06-20
Published