CVE-2018-10920 Other in knot-resolver
Remote attackers can poison the DNS cache due to improper input validation in Knot Resolver, affecting DNS integrity.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-10920?
CVE-2018-10920 is a high-severity vulnerability in cz.nic knot-resolver, published on 2 Aug 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.
Weakness: CWE-20
Which versions are affected by CVE-2018-10920?
It affects 1 product.
Products include Nic Knot Resolver.
How do I fix CVE-2018-10920?
Upgrade to a fixed version.
Is CVE-2018-10920 being exploited?
There is no known exploitation of CVE-2018-10920 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in cz.nic knot-resolver
Sources
Also known as DEBIAN-CVE-2018-10920, GHSA-xv4h-w5rx-q9c8, UBUNTU-CVE-2018-10920.