Every CVE Search/ Get API key

CVE-2022-40188

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption)...

7.5 HighFix available

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.95%Up 0.9 points since Sep 24, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets.

Record
CVE-2022-40188
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-407
Updated
2026-11-02
CVE List 7.5

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets.

Record
CVE-2022-40188
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-407
Updated
2026-11-02
EUVDEUVD-2022-43490 7.5

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets.

Record
EUVD-2022-43490
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-qj7c-f3xj-jxpv 7.5

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption)...

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets.

Record
GHSA-qj7c-f3xj-jxpv
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-407
Updated
2026-11-02
OSVALPINE-CVE-2022-40188 7.5

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets.

Record
ALPINE-CVE-2022-40188
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSV 7.5

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets.

Record
CVE-2022-40188
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-04
OSVDEBIAN-CVE-2022-40188 7.5

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets.

Record
DEBIAN-CVE-2022-40188
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVUBUNTU-CVE-2022-40188 7.5

Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity. During an attack, an authoritative server must return large NS sets or address sets.

Record
UBUNTU-CVE-2022-40188
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUSN-6225-1 No score

knot-resolver vulnerability

It was discovered that Knot Resolver did not correctly handle certain client options. A remote attacker could send requests to malicous domains and cause a denial of service.

Record
USN-6225-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
knot-resolver
Alpine:v3.16
 before 5.5.3-r0
5.5.3-r0
knot-resolver
Alpine:v3.17
 before 5.5.3-r0
5.5.3-r0
knot-resolver
Alpine:v3.18
 before 5.5.3-r0
5.5.3-r0
knot-resolver
Alpine:v3.19
 before 5.5.3-r0
5.5.3-r0
knot-resolver
Alpine:v3.20
 before 5.5.3-r0
5.5.3-r0
knot-resolver
Alpine:v3.21
 before 5.5.3-r0
5.5.3-r0
knot-resolver
Alpine:v3.22
 before 5.5.3-r0
5.5.3-r0
knot-resolver
Alpine:v3.23
 before 5.5.3-r0
5.5.3-r0
knot-resolver
Alpine:v3.24
 before 5.5.3-r0
5.5.3-r0
knot-resolver
Debian:12
 before 5.5.3-1
5.5.3-1
Show 7 moreShow less
Affected packages
PackageAffectedFixed
knot-resolver
Debian:13
 before 5.5.3-1
5.5.3-1
knot-resolver
Debian:14
 before 5.5.3-1
5.5.3-1
knot-resolver
Debian:10
 before 3.2.1-3+deb10u1, plus listed versions
3.2.1-3
3.2.1-3+deb10u1
knot-resolver
Ubuntu:Pro:16.04:LTS
 before 1.0.0~beta3-1ubuntu0.1~esm1, plus listed versions
1.0.0~beta2-123-g6134920-11.0.0~beta3-1
1.0.0~beta3-1ubuntu0.1~esm1
knot-resolver
Ubuntu:Pro:18.04:LTS
 before 2.1.1-1ubuntu0.1~esm2, plus listed versions
1.3.3-11.5.0-41.5.1-11.5.2-12.0.0-32.1.0-12.1.0-22.1.1-1
2.1.1-1ubuntu0.1~esm2
knot-resolver
Ubuntu:20.04:LTS
 before 3.2.1-3ubuntu2.1, plus listed versions
3.2.1-33.2.1-3ubuntu13.2.1-3ubuntu2
3.2.1-3ubuntu2.1
knot-resolver
Ubuntu:Pro:22.04:LTS
 before 5.4.4-1ubuntu0.1~esm1, plus listed versions
5.3.1-15.4.2-15.4.3-15.4.4-1
5.4.4-1ubuntu0.1~esm1

History

History
RecordedChangedSources
factsOSV
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-40188 is a high vulnerability (CVSS 7.5) in Nic Knot Resolver, published September 23, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.95%, the 80th percentile. Fixed in knot-resolver 5.5.3-r0.

References

Show 12 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open