CVE-2017-16100 | BDVDB-2026-101842 Detail
HackerOnedns-sync node module
Description#
dns-sync is a sync/blocking dns resolver. If untrusted user input is allowed into the resolve() method then command injection is possible.
Impact#
No impact statement in the source data.
Weaknesses#
- CWE-94 Improper Control of Generation of Code ('Code Injection')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.