CVE-2018-1099 | BDVDB-2026-98679 Detail
Red Hatetcd
Description#
DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).
Impact#
No impact statement in the source data.
Weaknesses#
- CWE-20 Improper Input Validation
References#
- https://bugzilla.redhat.com/show_bug.cgi?id=1552717
- https://github.com/coreos/etcd/issues/9353
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPGYHMSKDPW5GAMI7BEP3XQRVRLLBJKS/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JX7QTIT465BQGRGNCE74RATRQLKT2QE4/
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.