USN-6225-1: Knot Resolver vulnerability
13 July 2023
Knot Resolver could be made to crash if it received specially crafted network traffic.
Releases
Packages
- knot-resolver - caching, DNSSEC-validating DNS resolver
Details
It was discovered that Knot Resolver did not correctly handle certain
client options. A remote attacker could send requests to malicous domains
and cause a denial of service.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 22.10
Ubuntu 22.04
-
knot-resolver
-
5.4.4-1ubuntu0.1~esm1
Available with Ubuntu Pro
Ubuntu 20.04
Ubuntu 18.04
-
knot-resolver
-
2.1.1-1ubuntu0.1~esm2
Available with Ubuntu Pro
-
libkres6
-
2.1.1-1ubuntu0.1~esm2
Available with Ubuntu Pro
-
libkres-dev
-
2.1.1-1ubuntu0.1~esm2
Available with Ubuntu Pro
Ubuntu 16.04
-
knot-resolver
-
1.0.0~beta3-1ubuntu0.1~esm1
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.