Описание
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| knot-resolver | fixed | 6.4.1-1 | package |
Примечания
https://openwall.com/lists/oss-security/2026/07/23/6
https://github.com/venglin/knot-doq
EPSS
Процентиль: 32%
0.00389
Низкий
Связанные уязвимости
CVSS3: 8.1
ubuntu
10 дней назад
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.
CVSS3: 8.1
nvd
10 дней назад
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.
CVSS3: 8.1
github
10 дней назад
Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.
EPSS
Процентиль: 32%
0.00389
Низкий