CVE-2018-1099
DNS Rebinding in etcd
Summary
DNS Rebinding in etcd
Original description
The description as published by the source.
DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Go
go.etcd.io/etcd
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.4.0"}]}]
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2018-1099 etcd Fixed in: 3.4.23-1
- Ubuntu UBUNTU-CVE-2018-1099 etcd
References
- advisory nvd.nist.gov
- web github.com
- web github.com
- web bugzilla.redhat.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org