NI
Vendor
nic
4 products with CVEs on record
21
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-112112
BI
BIRD
nic
2.3
0%
Oct 18An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address…
CVE-2026-66374
KR
Knot Resolver
nic
8.1
1%
Jul 25Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path
CVE-2026-49943
BI
BIRD
NIC
6.3
0%
Jun 2CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP AS_PATH mask matching implementation in nest/a-path.c
CVE-2023-50387
KR
Knot Resolver
Nic
7.5
100%
Feb 14Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more…
CVE-2023-46317
KR
Knot Resolver
Nic
7.5
1%
Oct 22Knot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical responses from servers
CVE-2023-26249
KR
Knot Resolver
Nic
7.5
1%
Feb 21Knot Resolver before 5.6.0 enables attackers to consume its resources, launching amplification attacks and potentially causing a denial of service
CVE-2022-40188
KR
Knot Resolver
Nic
7.5
2%
Sep 23Knot Resolver before 5.5.3 allows remote attackers to cause a denial of service (CPU consumption) because of algorithmic complexity
CVE-2022-32983
KR
Knot Resolver
Nic
5.3
1%
Jun 20Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters
CVE-2021-40083
KR
Knot Resolver
Nic
7.5
1%
Aug 25Knot Resolver before 5.3.2 is prone to an assertion failure, triggerable by a remote attacker in an edge case (NSEC3 with too many iterations used for a positive wildcard proof)
CVE-2021-26928
BI
Bird
Nic
6.8
1%
Jun 4BIRD through 2.0.7 does not provide functionality for password authentication of BGP peers
CVE-2018-1110
KR
Knot Resolver
Nic
7.5
1%
Mar 30A flaw was found in knot-resolver before version 2.3.0
CVE-2021-3346
FO
Foris
Nic
9.8
2%
Jan 29Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template
CVE-2020-12667
KR
Knot Resolver
Nic
7.5
3%
May 19Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue
CVE-2019-19331
KR
Knot Resolver
Nic
7.5
2%
Dec 16knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization
CVE-2013-5661
KR
Knot Resolver
Nic
5.9
3%
Nov 5Cache Poisoning issue exists in DNS Response Rate Limiting
CVE-2019-16159
BI
Bird
Nic
7.5
3%
Sep 9BIRD Internet Routing Daemon 1.6.x through 1.6.7 and 2.x through 2.0.5 has a stack-based buffer overflow
CVE-2019-10191
KR
Knot Resolver
Nic
7.5
2%
Jul 16A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state,…
CVE-2019-10190
KR
Knot Resolver
Nic
7.5
2%
Jul 16A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allows remote attackers to bypass DNSSEC validation for…
CVE-2018-10920
KR
Knot Resolver
Nic
6.8
3%
Aug 2Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache
CVE-2014-0486
KC
Knot Cms
Nic
7.5
3%
Mar 27Knot DNS before 1.5.2 allows remote attackers to cause a denial of service (application crash) via a crafted DNS message
CVE-2018-1000002
KR
Knot Resolver
Nic
3.7
1%
Jan 22Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker in man-in-the-middle position to deny existence of some data…