Knot Resolver through 5.5.1 may allow DNS cache poisoning when there is an attempt to limit forwarding actions by filters.
{
"binaries": [
{
"binary_version": "2.1.1-1ubuntu0.1~esm2",
"binary_name": "knot-resolver"
},
{
"binary_version": "2.1.1-1ubuntu0.1~esm2",
"binary_name": "knot-resolver-module-http"
},
{
"binary_version": "2.1.1-1ubuntu0.1~esm2",
"binary_name": "libkres-dev"
},
{
"binary_version": "2.1.1-1ubuntu0.1~esm2",
"binary_name": "libkres6"
}
]
}