This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-10191 →

DEBIAN-CVE-2019-10191

A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains...

Original description

The description as published by the source.

A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state, opening possibility of domain hijack using attacks against insecure DNS protocol.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 knot-resolver

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-1"}]}]

Debian:13 knot-resolver

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-1"}]}]

Debian:14 knot-resolver

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.1-1"}]}]

References

advisory security-tracker.debian.org