CVE-2019-20329 - OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000

HIGH

OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000

Published Jan 2, 2020

8.1

HIGH

CVSS 3.1

EPSS 0.61%

OpenLambda 2019-09-10 allows DNS rebinding attacks against the OL server for the REST API on TCP port 5000.

No remediation recorded yet.

Weaknesses (1)

CWE-346

Link	Providers	Tags
https://github.com/open-lambda/open-lambda/blob/9f7f935195ca74700c60ebc1ecfdaefad40d144b/src/common/config.go#L135		x_refsource_MISCExploitThird Party Advisory
https://github.com/open-lambda/open-lambda/blob/9f7f935195ca74700c60ebc1ecfdaefad40d144b/src/server/lambdaServer.go#L92-L97		x_refsource_MISCExploitThird Party Advisory
https://github.com/open-lambda/open-lambda/issues/92		x_refsource_MISCIssue TrackingThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 2, 2020

Updated Aug 5, 2024

Reserved Jan 2, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a