CVE-2018-10920

Опубликовано: 02 авг. 2018

Источник: nvd

CVSS3: 7.5

CVSS3: 6.8

CVSS2: 4.3

EPSS Низкий

Описание

Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10920
Issue Tracking
Third Party Advisory
https://www.knot-resolver.cz/2018-08-02-knot-resolver-2.4.1.html
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10920
Issue Tracking
Third Party Advisory
https://www.knot-resolver.cz/2018-08-02-knot-resolver-2.4.1.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nic:knot_resolver:*:*:*:*:*:*:*:*

Версия до 2.4.1 (исключая)

EPSS

Процентиль: 87%

0.03239

Низкий

7.5 High

CVSS3

6.8 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2018-10920

CVSS3: 6.8

ubuntu

около 8 лет назад

Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.

CVE-2018-10920

CVSS3: 6.8

debian

около 8 лет назад

Improper input validation bug in DNS resolver component of Knot Resolv ...

GHSA-xv4h-w5rx-q9c8

CVSS3: 6.8

github

около 4 лет назад

Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.

EPSS

Процентиль: 87%

0.03239

Низкий

7.5 High

CVSS3

6.8 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20