CVE-2020-36517

Опубликовано: 10 мар. 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS operator to gain knowledge about internal network resources via the hardcoded DNS resolver configuration.

Ссылки

https://community.home-assistant.io/t/ha-os-dns-setting-configuration-not-respected/356572
Exploit
Issue Tracking
Vendor Advisory
https://github.com/home-assistant/plugin-dns/issues/17
Third Party Advisory
https://github.com/home-assistant/plugin-dns/issues/20
Exploit
Issue Tracking
Third Party Advisory
https://github.com/home-assistant/plugin-dns/issues/22
Issue Tracking
Third Party Advisory
https://github.com/home-assistant/plugin-dns/issues/50
Exploit
Issue Tracking
Third Party Advisory
https://github.com/home-assistant/plugin-dns/issues/51
Exploit
Issue Tracking
Third Party Advisory
https://github.com/home-assistant/plugin-dns/issues/53
Exploit
Third Party Advisory
https://github.com/home-assistant/plugin-dns/issues/54
Exploit
Third Party Advisory
https://github.com/home-assistant/plugin-dns/issues/6
Exploit
Third Party Advisory
https://github.com/home-assistant/plugin-dns/issues/64
Exploit
Third Party Advisory
https://github.com/home-assistant/plugin-dns/issues/70
Exploit
Third Party Advisory
https://github.com/home-assistant/plugin-dns/pull/55
Exploit
Patch
Third Party Advisory
https://github.com/home-assistant/plugin-dns/pull/56
Exploit
Issue Tracking
Third Party Advisory
https://github.com/home-assistant/plugin-dns/pull/58
Patch
Third Party Advisory
https://github.com/home-assistant/plugin-dns/pull/59
Issue Tracking
Patch
Third Party Advisory
https://community.home-assistant.io/t/ha-os-dns-setting-configuration-not-respected/356572
Exploit
Issue Tracking
Vendor Advisory
https://github.com/home-assistant/plugin-dns/issues/17
Third Party Advisory
https://github.com/home-assistant/plugin-dns/issues/20
Exploit
Issue Tracking
Third Party Advisory
https://github.com/home-assistant/plugin-dns/issues/22
Issue Tracking
Third Party Advisory
https://github.com/home-assistant/plugin-dns/issues/50
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:home-assistant:home-assistant:2022.03:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01845

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-203

Связанные уязвимости

GHSA-wj7x-544h-j3j3