Nic vulnerabilities

Products

• Knot Resolver 14
• Bird 4

Newest

• nic bird An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an... CVE-2026-112112 2.3 LowOctober 18, 2026
• nic knot resolver Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the... CVE-2026-66374 Public exploitFix available 8.1 HighJuly 25, 2026
• nic bird CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the... CVE-2026-49943 Public exploit 6.3 MediumJune 2, 2026
• fedoraproject fedora, isc bind, microsoft windows server 2008 +10 more +12 more Certain DNSSEC aspects of the DNS protocol (in RFC 4035 and related RFCs) allow remote attackers... CVE-2023-50387 Public exploitFix available EPSS 100.0% 7.5 HighFebruary 13, 2024
• nic knot resolver Knot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical... CVE-2023-46317 Fix available 7.5 HighOctober 22, 2023
• nic knot resolver Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification... CVE-2023-26249 Fix available 7.5 HighFebruary 21, 2023
• nic knot resolver, debian linux, fedoraproject fedora +2 more Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption)... CVE-2022-40188 Fix available 7.5 HighSeptember 23, 2022
• nic knot resolver Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit... CVE-2022-32983 5.3 MediumJune 20, 2022
• nic knot resolver Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in... CVE-2021-40083 Fix available 7.5 HighAugust 25, 2021
• nic bird ** DISPUTED ** BIRD through 2.0.7 does not provide functionality for password authentication of... CVE-2021-26928 Disputed 6.8 MediumJune 4, 2021
• cz.nic knot-resolver, nic knot resolver +1 more A flaw was found in knot-resolver before version 2.3.0. Malformed DNS messages may cause denial... CVE-2018-1110 Fix available 7.5 HighMarch 30, 2021
• nic foris Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template. CVE-2021-3346 9.8 CriticalJanuary 29, 2021
• nic knot resolver Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker... CVE-2020-12667 Fix available 7.5 HighMay 19, 2020
• cz.nic knot-resolver, debian linux, nic knot resolver +2 more knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU... CVE-2019-19331 Fix available 7.5 HighDecember 16, 2019
• isc bind, nic knot resolver, nlnetlabs nsd +1 more +3 more Cache Poisoning issue exists in DNS Response Rate Limiting. CVE-2013-5661 5.9 MediumNovember 5, 2019
• nic bird, debian linux, fedoraproject fedora +1 more +3 more BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer... CVE-2019-16159 Fix available 7.5 HighSeptember 9, 2019
• nic knot resolver, cz.nic knot-resolver, fedoraproject fedora +2 more A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows... CVE-2019-10191 Fix available 6.3 MediumJuly 10, 2019
• nic knot resolver, cz.nic knot-resolver, fedoraproject fedora +2 more A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0... CVE-2019-10190 Fix available 5.4 MediumJuly 10, 2019
• nic knot resolver, cz.nic knot-resolver +1 more Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows... CVE-2018-10920 Public exploitFix available 7.5 HighAugust 2, 2018
• nic knot cms Knot DNS before 1.5.2 allows remote attackers to cause a denial of service (application crash)... CVE-2014-0486 Fix available 7.5 HighMarch 27, 2018
• nic knot resolver Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1... CVE-2018-1000002 Fix available 3.7 LowJanuary 22, 2018