This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2018-1099 →

DEBIAN-CVE-2018-1099

DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser int...

Original description

The description as published by the source.

DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 etcd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.23-1"}]}]

Debian:13 etcd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.23-1"}]}]

Debian:14 etcd

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.23-1"}]}]

References

advisory security-tracker.debian.org