← voltar
CVE-2017-15105

CVE-2017-15105

EPSS 2.7%CWE-358
A flaw was found in the way unbound before 1.6.8 validated wildcard-synthesized NSEC records. An improperly validated wildcard NSEC record could be used to prove the non-existence (NXDOMAIN answer) of an existing wildcard record, or trick unbound into accepting a NODATA proof.
Produtos afetados
NLnet Labs · unbound

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://lists.debian.org/debian-lts-announce/2018/01/msg00039.htmlhttps://lists.debian.org/debian-lts-announce/2019/02/msg00022.htmlhttps://unbound.net/downloads/CVE-2017-15105.txthttps://usn.ubuntu.com/3673-1/http://www.securityfocus.com/bid/102817