CVE-2024-25638highCWE-345CWE-349

CVE-2024-25638: high-severity vulnerability in dnsjava

DNSJava DNSSEC Bypass

Published · Updated

Follow this CVE+ Monitor dnsjava+ Monitor dnsjava

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.9epss 0.4%
dnsjava is an implementation of DNS in Java. Records in DNS replies are not checked for their relevance to the query, allowing an attacker to respond with RRs from different zones. This vulnerability is fixed in 3.6.0.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
Affected products
dnsjava · dnsjava