CVE-2018-10920
CVE-2018-10920
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.
CVSS 7.5 · High · EPSS 3.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
knot-resolver
- Versions
- before 2.4.1: Affected
No fix published
knot-resolver Debian:12
- Affected ranges
- ECOSYSTEM: < 2.4.1-1
Update to 2.4.1-1
knot-resolver Debian:13
- Affected ranges
- ECOSYSTEM: < 2.4.1-1
Update to 2.4.1-1
knot-resolver Debian:14
- Affected ranges
- ECOSYSTEM: < 2.4.1-1
Update to 2.4.1-1
knot-resolver Ubuntu:Pro:16.04:LTS
- Versions
- 1.0.0~beta2-123-g6134920-1
- 1.0.0~beta3-1
- 1.0.0~beta3-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
knot-resolver Ubuntu:Pro:18.04:LTS
- Versions
- 1.3.3-1
- 1.5.0-4
- 1.5.1-1
- 1.5.2-1
- 2.0.0-3
- 2.1.0-1
- 2.1.0-2
- 2.1.1-1
- 2.1.1-1ubuntu0.1~esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published