CVE-2018-1000002 - Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay

Back Back to CVE browser

LOW

Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay

Published Jan 22, 2018

3.7

LOW

CVSS 3.1

EPSS 1.08%

Description

Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker in man-in-the-middle position to deny existence of some data in DNS via packet replay.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-1774
Advisory
https://www.knot-resolver.cz/2018-01-22-knot-resolver-1.5.2.html
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-1774		Advisory
https://www.knot-resolver.cz/2018-01-22-knot-resolver-1.5.2.html		x_refsource_CONFIRMVendor Advisory