Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/knot-resolver@5.0.1-1?distro=trixie
Typedeb
Namespacedebian
Nameknot-resolver
Version5.0.1-1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version5.1.1-0.1
Latest_non_vulnerable_version6.2.0-2
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-8ks2-kv5d-gkdc
vulnerability_id VCID-8ks2-kv5d-gkdc
summary knot-resolver before version 4.3.0 is vulnerable to denial of service through high CPU utilization. DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A records can be squashed into one DNS message (limit is 64kB).
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-19331
reference_id
reference_type
scores
0
value 0.00489
scoring_system epss
scoring_elements 0.65416
published_at 2026-04-01T12:55:00Z
1
value 0.00489
scoring_system epss
scoring_elements 0.65465
published_at 2026-04-02T12:55:00Z
2
value 0.00489
scoring_system epss
scoring_elements 0.65492
published_at 2026-04-04T12:55:00Z
3
value 0.00489
scoring_system epss
scoring_elements 0.65457
published_at 2026-04-07T12:55:00Z
4
value 0.00489
scoring_system epss
scoring_elements 0.6551
published_at 2026-04-08T12:55:00Z
5
value 0.00489
scoring_system epss
scoring_elements 0.65521
published_at 2026-04-09T12:55:00Z
6
value 0.00489
scoring_system epss
scoring_elements 0.65539
published_at 2026-04-11T12:55:00Z
7
value 0.00489
scoring_system epss
scoring_elements 0.65526
published_at 2026-04-12T12:55:00Z
8
value 0.00489
scoring_system epss
scoring_elements 0.65499
published_at 2026-04-13T12:55:00Z
9
value 0.00489
scoring_system epss
scoring_elements 0.65534
published_at 2026-04-16T12:55:00Z
10
value 0.00489
scoring_system epss
scoring_elements 0.65546
published_at 2026-04-18T12:55:00Z
11
value 0.00489
scoring_system epss
scoring_elements 0.65531
published_at 2026-04-21T12:55:00Z
12
value 0.00489
scoring_system epss
scoring_elements 0.65547
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-19331
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19331
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-19331
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946181
reference_id 946181
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946181
3
reference_url https://usn.ubuntu.com/7047-1/
reference_id USN-7047-1
reference_type
scores
url https://usn.ubuntu.com/7047-1/
fixed_packages
0
url pkg:deb/debian/knot-resolver@5.0.1-1?distro=trixie
purl pkg:deb/debian/knot-resolver@5.0.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@5.0.1-1%3Fdistro=trixie
1
url pkg:deb/debian/knot-resolver@5.3.1-1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/knot-resolver@5.3.1-1%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-66sa-bc5p-jqde
1
vulnerability VCID-c7c5-awxv-j3de
2
vulnerability VCID-efrw-bm7j-6qgz
3
vulnerability VCID-ps4g-f1q9-wqhm
4
vulnerability VCID-vprj-j7u6-zbe7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@5.3.1-1%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/knot-resolver@5.6.0-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/knot-resolver@5.6.0-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@5.6.0-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/knot-resolver@5.7.5-1?distro=trixie
purl pkg:deb/debian/knot-resolver@5.7.5-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@5.7.5-1%3Fdistro=trixie
4
url pkg:deb/debian/knot-resolver@6.2.0-2?distro=trixie
purl pkg:deb/debian/knot-resolver@6.2.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@6.2.0-2%3Fdistro=trixie
aliases CVE-2019-19331
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8ks2-kv5d-gkdc
1
url VCID-fptj-ztkq-7uag
vulnerability_id VCID-fptj-ztkq-7uag
summary A vulnerability was discovered in DNS resolver of knot resolver before version 4.1.0 which allows remote attackers to downgrade DNSSEC-secure domains to DNSSEC-insecure state, opening possibility of domain hijack using attacks against insecure DNS protocol.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-10191
reference_id
reference_type
scores
0
value 0.00268
scoring_system epss
scoring_elements 0.50173
published_at 2026-04-01T12:55:00Z
1
value 0.00268
scoring_system epss
scoring_elements 0.50219
published_at 2026-04-02T12:55:00Z
2
value 0.00268
scoring_system epss
scoring_elements 0.50248
published_at 2026-04-04T12:55:00Z
3
value 0.00268
scoring_system epss
scoring_elements 0.50197
published_at 2026-04-07T12:55:00Z
4
value 0.00268
scoring_system epss
scoring_elements 0.50251
published_at 2026-04-08T12:55:00Z
5
value 0.00268
scoring_system epss
scoring_elements 0.50243
published_at 2026-04-09T12:55:00Z
6
value 0.00268
scoring_system epss
scoring_elements 0.5027
published_at 2026-04-11T12:55:00Z
7
value 0.00268
scoring_system epss
scoring_elements 0.50244
published_at 2026-04-12T12:55:00Z
8
value 0.00268
scoring_system epss
scoring_elements 0.50232
published_at 2026-04-13T12:55:00Z
9
value 0.00268
scoring_system epss
scoring_elements 0.50277
published_at 2026-04-18T12:55:00Z
10
value 0.00268
scoring_system epss
scoring_elements 0.50252
published_at 2026-04-21T12:55:00Z
11
value 0.00268
scoring_system epss
scoring_elements 0.50224
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-10191
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10191
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10191
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=932048
reference_id 932048
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=932048
3
reference_url https://usn.ubuntu.com/7047-1/
reference_id USN-7047-1
reference_type
scores
url https://usn.ubuntu.com/7047-1/
fixed_packages
0
url pkg:deb/debian/knot-resolver@5.0.1-1?distro=trixie
purl pkg:deb/debian/knot-resolver@5.0.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@5.0.1-1%3Fdistro=trixie
1
url pkg:deb/debian/knot-resolver@5.3.1-1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/knot-resolver@5.3.1-1%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-66sa-bc5p-jqde
1
vulnerability VCID-c7c5-awxv-j3de
2
vulnerability VCID-efrw-bm7j-6qgz
3
vulnerability VCID-ps4g-f1q9-wqhm
4
vulnerability VCID-vprj-j7u6-zbe7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@5.3.1-1%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/knot-resolver@5.6.0-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/knot-resolver@5.6.0-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@5.6.0-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/knot-resolver@5.7.5-1?distro=trixie
purl pkg:deb/debian/knot-resolver@5.7.5-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@5.7.5-1%3Fdistro=trixie
4
url pkg:deb/debian/knot-resolver@6.2.0-2?distro=trixie
purl pkg:deb/debian/knot-resolver@6.2.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@6.2.0-2%3Fdistro=trixie
aliases CVE-2019-10191
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fptj-ztkq-7uag
2
url VCID-g2wb-bccm-ufhn
vulnerability_id VCID-g2wb-bccm-ufhn
summary A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allows remote attackers to bypass DNSSEC validation for non-existence answer. NXDOMAIN answer would get passed through to the client even if its DNSSEC validation failed, instead of sending a SERVFAIL packet. Caching is not affected by this particular bug but see CVE-2019-10191.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-10190
reference_id
reference_type
scores
0
value 0.00262
scoring_system epss
scoring_elements 0.49468
published_at 2026-04-01T12:55:00Z
1
value 0.00262
scoring_system epss
scoring_elements 0.49498
published_at 2026-04-02T12:55:00Z
2
value 0.00262
scoring_system epss
scoring_elements 0.49524
published_at 2026-04-04T12:55:00Z
3
value 0.00262
scoring_system epss
scoring_elements 0.49477
published_at 2026-04-07T12:55:00Z
4
value 0.00262
scoring_system epss
scoring_elements 0.49532
published_at 2026-04-08T12:55:00Z
5
value 0.00262
scoring_system epss
scoring_elements 0.49528
published_at 2026-04-09T12:55:00Z
6
value 0.00262
scoring_system epss
scoring_elements 0.49545
published_at 2026-04-11T12:55:00Z
7
value 0.00262
scoring_system epss
scoring_elements 0.49516
published_at 2026-04-12T12:55:00Z
8
value 0.00262
scoring_system epss
scoring_elements 0.49518
published_at 2026-04-13T12:55:00Z
9
value 0.00262
scoring_system epss
scoring_elements 0.49565
published_at 2026-04-16T12:55:00Z
10
value 0.00262
scoring_system epss
scoring_elements 0.49563
published_at 2026-04-18T12:55:00Z
11
value 0.00262
scoring_system epss
scoring_elements 0.49534
published_at 2026-04-21T12:55:00Z
12
value 0.00262
scoring_system epss
scoring_elements 0.49523
published_at 2026-04-24T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-10190
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10190
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10190
2
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=932048
reference_id 932048
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=932048
3
reference_url https://usn.ubuntu.com/7047-1/
reference_id USN-7047-1
reference_type
scores
url https://usn.ubuntu.com/7047-1/
fixed_packages
0
url pkg:deb/debian/knot-resolver@5.0.1-1?distro=trixie
purl pkg:deb/debian/knot-resolver@5.0.1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@5.0.1-1%3Fdistro=trixie
1
url pkg:deb/debian/knot-resolver@5.3.1-1%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/knot-resolver@5.3.1-1%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-66sa-bc5p-jqde
1
vulnerability VCID-c7c5-awxv-j3de
2
vulnerability VCID-efrw-bm7j-6qgz
3
vulnerability VCID-ps4g-f1q9-wqhm
4
vulnerability VCID-vprj-j7u6-zbe7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@5.3.1-1%252Bdeb11u1%3Fdistro=trixie
2
url pkg:deb/debian/knot-resolver@5.6.0-1%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/knot-resolver@5.6.0-1%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@5.6.0-1%252Bdeb12u1%3Fdistro=trixie
3
url pkg:deb/debian/knot-resolver@5.7.5-1?distro=trixie
purl pkg:deb/debian/knot-resolver@5.7.5-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@5.7.5-1%3Fdistro=trixie
4
url pkg:deb/debian/knot-resolver@6.2.0-2?distro=trixie
purl pkg:deb/debian/knot-resolver@6.2.0-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@6.2.0-2%3Fdistro=trixie
aliases CVE-2019-10190
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-g2wb-bccm-ufhn
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/knot-resolver@5.0.1-1%3Fdistro=trixie