CVE-2018-10920: Input Validation
Published Aug 2, 2018
·Updated
Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.
Affected Software
1 affected component
nic Knot Resolver<2.4.1
Event History
Aug 2, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2018-10920?
CVE-2018-10920 is an improper input validation vulnerability in the DNS resolver component of Knot Resolver before version 2.4.1.
2
What is the severity of CVE-2018-10920?
The severity of CVE-2018-10920 is high with a CVSS score of 6.8.
3
How does CVE-2018-10920 affect Knot Resolver?
CVE-2018-10920 allows a remote attacker to poison the cache of Knot Resolver before version 2.4.1.
4
How can I fix CVE-2018-10920?
To fix CVE-2018-10920, update Knot Resolver to version 2.4.1 or later.
5
Where can I find more information about CVE-2018-10920?
You can find more information about CVE-2018-10920 in the references provided: [Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10920) and [Knot Resolver](https://www.knot-resolver.cz/2018-08-02-knot-resolver-2.4.1.html).