Описание
Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| knot-resolver | fixed | 2.4.1-1 | package |
Примечания
https://www.knot-resolver.cz/2018-08-02-knot-resolver-2.4.1.html
https://www.openwall.com/lists/oss-security/2018/08/09/2 (including patch)
EPSS
Процентиль: 94%
0.12203
Средний
Связанные уязвимости
CVSS3: 6.8
ubuntu
больше 7 лет назад
Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.
CVSS3: 6.8
nvd
больше 7 лет назад
Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.
CVSS3: 6.8
github
больше 3 лет назад
Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.
EPSS
Процентиль: 94%
0.12203
Средний