GoogleOSV:CVE-2020-36517CVE-2020-36517
An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS operator to gain knowledge about internal network resources via the hardcoded DNS resolver configuration.
| CPE | Name | Operator | Version |
|---|---|---|---|
| plugin-dns | eq | 2020.11.0 | |
| plugin-dns | eq | 2020.10.2 | |
| plugin-dns | eq | 2021.01.0 | |
| plugin-dns | eq | 2020.10.1 | |
| plugin-dns | eq | 5 | |
| plugin-dns | eq | 2020.12.0 | |
| plugin-dns | eq | 2020.10.0 | |
| plugin-dns | eq | 9 | |
| plugin-dns | eq | 6 | |
| plugin-dns | eq | 1 |
References
community.home-assistant.io/t/ha-os-dns-setting-configuration-not-respected/356572
github.com/home-assistant/plugin-dns/issues/17
github.com/home-assistant/plugin-dns/issues/20
github.com/home-assistant/plugin-dns/issues/22
github.com/home-assistant/plugin-dns/issues/50
github.com/home-assistant/plugin-dns/issues/51
github.com/home-assistant/plugin-dns/issues/53
github.com/home-assistant/plugin-dns/issues/54
github.com/home-assistant/plugin-dns/issues/6
github.com/home-assistant/plugin-dns/issues/64
github.com/home-assistant/plugin-dns/issues/70
github.com/home-assistant/plugin-dns/pull/55
github.com/home-assistant/plugin-dns/pull/56
github.com/home-assistant/plugin-dns/pull/58
github.com/home-assistant/plugin-dns/pull/59
Related
