CVE-2016-6171: Knot-DNS Knot DNS

High severity, CVSS 8.6. EPSS: 2.8% chance of exploitation in the next 30 days.

Knot DNS before 2.3.0 allows remote DNS servers to cause a denial of service (memory exhaustion and slave server crash) via a large zone transfer for (1) DDNS, (2) AXFR, or (3) IXFR.

Affected products

• Knot-DNS Knot DNS: before 2.3.0 (fixed in 2.3.0)

Published 2017-02-09. Last modified 2026-06-17.