CVE-2018-1000002 Denial of service in n/a

Low 3.7 Published 22 Jan 2018 Updated 5 Aug 2024

A man-in-the-middle attacker can deny the existence of DNS data via packet replay due to improper input validation in Knot Resolver.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2018-1000002?

CVE-2018-1000002 is a low-severity denial of service vulnerability in n/a, published on 22 Jan 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay.

Weakness: CWE-20

Which versions are affected by CVE-2018-1000002?

It affects 1 product.

Products include Nic Knot Resolver.

How do I fix CVE-2018-1000002?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2018-1000002 being exploited?

There is no known exploitation of CVE-2018-1000002 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2018-1000002, GHSA-47fr-2fhh-8hrg.