Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:48189
HistoryJul 23, 2024 - 7:59 a.m.

Improper Response Validation

2024-07-2307:59:23
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
improper response validation
dnsjava
vulnerability
dns replies
attacker
different zones

CVSS3

8.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L

AI Score

6.6

Confidence

Low

dnsjava is vulnerable to Improper Response Validation. The vulnerability is due to records in DNS replies not being checked for their relevance to the query, allowing an attacker to respond with RRs from different zones.

CVSS3

8.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L

AI Score

6.6

Confidence

Low