Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hghm-3vc3-hppj

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.6

Описание

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.

EPSS

Процентиль: 26%
0.00084
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.6
ubuntu
больше 3 лет назад

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.

CVSS3: 5.6
redhat
почти 4 года назад

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.

CVSS3: 5.6
nvd
больше 3 лет назад

A flaw was found in c-ares library, where a missing input validation check of host names returned by DNS (Domain Name Servers) can lead to output of wrong hostnames which might potentially lead to Domain Hijacking. The highest threat from this vulnerability is to confidentiality and integrity as well as system availability.

CVSS3: 5.6
msrc
4 месяца назад

Описание отсутствует

CVSS3: 5.6
debian
больше 3 лет назад

A flaw was found in c-ares library, where a missing input validation c ...

EPSS

Процентиль: 26%
0.00084
Низкий

5.6 Medium

CVSS3

Дефекты

CWE-79