Lucene search

K

RedhatCVELIST:CVE-2018-1099

HistoryFeb 25, 2018 - 12:00 a.m.

CVE-2018-1099

2018-02-2500:00:00

CWE-20

redhat

www.cve.org

1

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.7%

DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).

CNA Affected

[
  {
    "product": "etcd",
    "vendor": "Red Hat, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "3.3.1 and earlier"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1552717

github.com/coreos/etcd/issues/9353

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JX7QTIT465BQGRGNCE74RATRQLKT2QE4/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPGYHMSKDPW5GAMI7BEP3XQRVRLLBJKS/

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.7%

Related for CVELIST:CVE-2018-1099

redhatcve1 cve1 osv2 nvd1 prion1 cgr1 gitlab1 ubuntucve1 veracode1 github1 debiancve1 wolfi1 ibm7 fedora2 altlinux1 openvas1 nessus4 photon6