CVE-2018-10920: Input Validation
Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Knot Resolverto a version that resolves this vulnerability.Fixed in 2.4.1
Event History
Frequently Asked Questions
What is CVE-2018-10920?
CVE-2018-10920 is an improper input validation vulnerability in the DNS resolver component of Knot Resolver before version 2.4.1.
What is the severity of CVE-2018-10920?
The severity of CVE-2018-10920 is high with a CVSS score of 6.8.
How does CVE-2018-10920 affect Knot Resolver?
CVE-2018-10920 allows a remote attacker to poison the cache of Knot Resolver before version 2.4.1.
How can I fix CVE-2018-10920?
To fix CVE-2018-10920, update Knot Resolver to version 2.4.1 or later.
Where can I find more information about CVE-2018-10920?
You can find more information about CVE-2018-10920 in the references provided: [Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10920) and [Knot Resolver](https://www.knot-resolver.cz/2018-08-02-knot-resolver-2.4.1.html).