Lucene search

Veracode Vulnerability DatabaseVERACODE:6207

HistoryApr 27, 2018 - 8:12 a.m.

DNS Rebinding

2018-04-2708:12:07

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

29.7%

JSON

github.com/coreos/etcd is vulnerable to DNS rebinding. The vulnerability exists because it does not prevent the attacker to use its DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).

CPENameOperatorVersion
github.com/coreos/etcdeqHEAD
github.com/coreos/etcdle3.2.30
github.com/coreos/etcdle3.3.22
etcd:sideq3.3.25+dfsg-6

Name	Operator	Version
github.com/coreos/etcd	eq	HEAD
github.com/coreos/etcd	le	3.2.30
github.com/coreos/etcd	le	3.3.22
etcd:sid	eq	3.3.25+dfsg-6

References

bugzilla.redhat.com/show_bug.cgi?id=1552717

github.com/coreos/etcd/commit/a7e5790c82039945639798ae9a3289fe787f5e56

github.com/coreos/etcd/pull/9372

github.com/etcd-io/etcd/blob/a7e5790c82039945639798ae9a3289fe787f5e56/CHANGELOG-3.4.md

0.001 Low

EPSS

Percentile

29.7%

JSON

Related for VERACODE:6207