CVE-2016-6171

Name	CVE-2016-6171
Description	Knot DNS before 2.3.0 allows remote DNS servers to cause a denial of service (memory exhaustion and slave server crash) via a large zone transfer for (1) DDNS, (2) AXFR, or (3) IXFR.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	830809

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
knot (PTS)	bullseye	3.0.5-1+deb11u1	fixed
	bookworm	3.2.6-1	fixed
	trixie	3.4.6-2	fixed
	forky, sid	3.5.0-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
knot	source	(unstable)	2.3.0-1			830809

[jessie] - knot <no-dsa> (Minor issue)
https://gitlab.labs.nic.cz/labs/knot/merge_requests/541
https://gitlab.labs.nic.cz/labs/knot/issues/464