PT-2018-9195 · Cz.Nic · Knot Resolver

Publicado 2018-01-22 · Atualizado 2019-11-06 · CVE-2018-1000002

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Knot Resolver versions prior to 1.5.2

Description: The issue is related to improper input validation bugs in DNSSEC validators components. This allows an attacker in a man-in-the-middle position to deny the existence of some data in DNS via packet replay.

Recommendations: For versions prior to 1.5.2, update to version 1.5.2 or later to resolve the issue.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-1000002

Produtos afetados

Knot Resolver

Referências · 5

• https://osv.dev/vulnerability/DEBIAN-CVE-2018-1000002 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000002 · Nota de Segurança
• https://knot-resolver.cz/2018-01-22-knot-resolver-1.5.2.html · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2018-1000002 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-1000002 · Aviso do Fabricante