CVE-2021-40083

    Dashboard / Vulnerabilities / CVE-2021-40083

    CVE-2021-40083

    Published: 25 Aug 2021Last Modified: 9 Jul 2026

    Summary:

    Details: Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case (NSEC3 with too many iterations used for a positive wildcard proof).

    References: https://gitlab.nic.cz/knot/knot-resolver/-/merge_requests/1169

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -ae3c81600a6ce5909bd3abc9dbc4d31e89ef3179

    Affected versions

    v5.3.1
    v5.3.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-40083 | CVE-DB