CVE-2017-18382: Input Validation
Published Aug 2, 2019
·Updated
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306).
Affected Software
4 affected components
Cpanel Cpanel>=61.9999.55<62.0.35
Cpanel Cpanel>=63.9999.74<64.0.42
Cpanel Cpanel>=65.9999.38<66.0.34
Cpanel Cpanel>=67.9999.64<68.0.15
Event History
Aug 2, 2019
CVE Published
via MITRE·12:19 PM
Data Sourced
via MITRE·12:19 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18382?
CVE-2017-18382 has a severity rating that could allow for exploitation through incorrect DNS zone configurations.
2
How do I fix CVE-2017-18382?
To fix CVE-2017-18382, upgrade cPanel to version 68.0.15 or later.
3
What systems are affected by CVE-2017-18382?
CVE-2017-18382 affects cPanel versions prior to 68.0.15 as well as specific earlier versions.
4
Is CVE-2017-18382 related to email security?
Yes, CVE-2017-18382 allows the use of unreserved email addresses in DNS zone SOA records, which can pose security risks.
5
What should I look for to determine if I am vulnerable to CVE-2017-18382?
Check your cPanel version to ensure it is 68.0.15 or newer to avoid CVE-2017-18382 vulnerabilities.