What’s Vulnerable › Vulnerabilities

CVE-2022-32983

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-06-20 · updated 2026-06-17
• Weakness: CWE-290

Description

Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters.

Affected products

• CZ.NIC knot-resolver: through 5.5.1

References

• https://github.com/CZ-NIC/knot-resolver/commit/ccb9d9794db5eb757c33becf65cb1cf48ecfd968
• https://knot-resolver.readthedocs.io/en/stable/modules-policy.html#forwarding
• https://github.com/CZ-NIC/knot-resolver/commit/ccb9d9794db5eb757c33becf65cb1cf48ecfd968
• https://knot-resolver.readthedocs.io/en/stable/modules-policy.html#forwarding

Get alerted when CVE-2022-32983 or the next vulnerability affects your stack