x/vulndb: potential Go vuln in gitlab.nic.cz/knot/knot-resolver: CVE-2023-46317

[GoVulnBot]

CVE-2023-46317 references gitlab.nic.cz/knot/knot-resolver, which may be a Go module.

Description:
Knot Resolver before 5.7.0 performs many TCP reconnections upon receiving certain nonsensical responses from servers.

References:

• NIST: https://nvd.nist.gov/vuln/detail/CVE-2023-46317
• JSON: https://github.com/CVEProject/cvelist/tree/037b975af3d69be0ad30e00b8d60d8416be5ec19/2023/46xxx/CVE-2023-46317.json
• web: https://www.knot-resolver.cz/2023-08-22-knot-resolver-5.7.0.html
• web: https://gitlab.nic.cz/knot/knot-resolver/-/merge_requests/1448
• Imported by: https://pkg.go.dev/gitlab.nic.cz/knot/knot-resolver?tab=importedby

Cross references:
No existing reports found with this module or alias.

See doc/triage.md for instructions on how to triage this report.

modules:
    - module: gitlab.nic.cz/knot/knot-resolver
      vulnerable_at: 6.0.4+incompatible
      packages:
        - package: n/a
cves:
    - CVE-2023-46317
references:
    - web: https://www.knot-resolver.cz/2023-08-22-knot-resolver-5.7.0.html
    - web: https://gitlab.nic.cz/knot/knot-resolver/-/merge_requests/1448

[gopherbot]

Change https://go.dev/cl/537395 mentions this issue: data/excluded: batch add 18 excluded reports