CVE-2019-10190

A vulnerability was discovered in DNS resolver component of knot resolver through version 3.2.0 before 4.1.0 which allows remote attackers to bypass DNSSEC validation for non-existence answer. NXDOMAIN answer would get passed through to the client even if its DNSSEC validation failed, instead of sending a SERVFAIL packet. Caching is not affected by this particular bug but see CVE-2019-10191.

• CWE-20
• CWE-20

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10190Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/04/msg00017.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMSSWBHINIX4WE6UDXWM66L7JYEK6XS6/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZV5YZZ5766UIG2TFLFJL6EESQNAP5X5/
• https://www.knot-resolver.cz/2019-07-10-knot-resolver-4.1.0.htmlRelease Notes, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10190Issue Tracking, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2024/04/msg00017.html
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMSSWBHINIX4WE6UDXWM66L7JYEK6XS6/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZV5YZZ5766UIG2TFLFJL6EESQNAP5X5/
• https://www.knot-resolver.cz/2019-07-10-knot-resolver-4.1.0.htmlRelease Notes, Vendor Advisory

Published

Jul 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-10185It was found that icedtea-web up to and including 1.7.2 and …8.6
• CVE-2019-10186A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5…8.8
• CVE-2019-10187A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5…4.3
• CVE-2019-10188A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5…4.3
• CVE-2019-10189A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5…4.3
• CVE-2019-1019A security feature bypass vulnerability exists where a NETLO…8.5
• CVE-2019-10191A vulnerability was discovered in DNS resolver of knot resol…7.5
• CVE-2019-10192A heap-buffer overflow vulnerability was found in the Redis …7.2
• CVE-2019-10193A stack-buffer overflow vulnerability was found in the Redis…7.2
• CVE-2019-10194Sensitive passwords used in deployment and configuration of …5.5
• CVE-2019-10195A flaw was found in IPA, all 4.6.x versions before 4.6.7, al…6.5
• CVE-2019-10196A flaw was found in http-proxy-agent, prior to version 2.1.0…9.8