PT-2022-21620 · Unknown+2 · Knot Resolver+2

Published 2022-06-20 · Updated 2024-02-14 · CVE-2022-32983

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Knot Resolver versions through 5.5.1

Description The issue may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters.

Recommendations For versions through 5.5.1, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

ALT-PU-2022-2696

ALT-PU-2024-2060

CVE-2022-32983

Affected Products

Alt Linux

Debian

Knot Resolver

References · 13

• https://github.com/CZ-NIC/knot-resolver/commit/ccb9d9794db5eb757c33becf65cb1cf48ecfd968 · Patch
• https://knot-resolver.readthedocs.io/en/stable/modules-policy.html#forwarding · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32983 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-32983 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-32983 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-32983 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-32983 · Security Note
• https://osv.dev/vulnerability/CVE-2022-32983 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-32983 · Vendor Advisory
• https://t.me/true_secator/4724 · Telegram Post
• https://t.me/cibsecurity/44842 · Telegram Post
• https://t.me/cvenotify/31903 · Telegram Post
• https://twitter.com/fletch_ai/status/1691632627332047057 · Twitter Post