CVE-2018-1099CWE-20

CVE-2018-1099

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%

exploitation probability

0.5%top 59% of all CVEs

observed exploitation

nono source reports it

DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).

Affected products

Red Hat, Inc. · etcd

References

https://bugzilla.redhat.com/show_bug.cgi?id=1552717 https://github.com/coreos/etcd/issues/9353 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JX7QTIT465BQGRGNCE74RATRQLKT2QE4/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPGYHMSKDPW5GAMI7BEP3XQRVRLLBJKS/