CVE-2018-10920CWE-20

Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache

High · published August 2, 2018

CVSS v3.0
7.5
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.03239 · 88.2th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-08-02T13:00Z
EPSS history
Timeline
  • 02 AUG 13:00Z
    Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache
    cvelistv5