CVE-2018-1099
published 2018-04-03CVE-2018-1099: DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending…
PriorityP424medium5.5CVSS 3.0
AVLACLPRLUINSUCNIHAN
EPSS
0.51%
40.2th percentile
DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | etcd | < etcd 3.4.23-1 (bookworm) | etcd 3.4.23-1 (bookworm) |
| etcd | etcd | >= 0 < 3.4.23-1 | 3.4.23-1 |
| etcd | etcd | >= 0 < 3.4.23-1 | 3.4.23-1 |
| etcd | etcd | >= 0 < 3.4.23-1 | 3.4.23-1 |
| fedoraproject | fedora | — | — |
| go.etcd.io | etcd | >= 0 < 3.4.0 | 3.4.0 |
| red_hat_inc | etcd | — | — |
| redhat | etcd | <= 3.3.1 | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:P/A:N
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
etcd: DNS rebinding vulnerability in etcd server
vendor_redhat·2018-03-07·CVSS 5.5
CVE-2018-1099 [MEDIUM] CWE-284 etcd: DNS rebinding vulnerability in etcd server
etcd: DNS rebinding vulnerability in etcd server
DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).
It has been discovered that etcd does not correctly restrict access to resources based on hostname. A remote attacker could perform a DNS-rebinding attack and trick the browser into sending requests to an etcd server on an internal network, bypassing the Same-Origin Policy.
Mitigation: Configure and enable authentication on the etcd server or secure your client connection via HTTPS.
Package: etcd (Red Hat Enterprise Linux 7) - Will not fix
Package: etcd3 (Red Hat Enterprise Linux 7) - Will not fix
Package: atomic-openshift (Red Hat O
Debian
CVE-2018-1099: etcd - DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can con...
vendor_debian·2018·CVSS 5.5
CVE-2018-1099 [MEDIUM] CVE-2018-1099: etcd - DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can con...
DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).
Scope: local
bookworm: resolved (fixed in 3.4.23-1)
bullseye: open
forky: resolved (fixed in 3.4.23-1)
sid: resolved (fixed in 3.4.23-1)
trixie: resolved (fixed in 3.4.23-1)
OSV
DNS Rebinding in etcd
osv·2022-02-15
CVE-2018-1099 [MEDIUM] DNS Rebinding in etcd
DNS Rebinding in etcd
DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).
GHSA
DNS Rebinding in etcd
ghsa·2022-02-15
CVE-2018-1099 [MEDIUM] CWE-20 DNS Rebinding in etcd
DNS Rebinding in etcd
DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).
OSV
CVE-2018-1099: DNS rebinding vulnerability found in etcd 3
osv·2018-04-03·CVSS 5.5
CVE-2018-1099 [MEDIUM] CVE-2018-1099: DNS rebinding vulnerability found in etcd 3
DNS rebinding vulnerability found in etcd 3.3.1 and earlier. An attacker can control his DNS records to direct to localhost, and trick the browser into sending requests to localhost (or any other address).
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2018-1098 CVE-2018-1099 etcd: various flaws [fedora-all]
bugzilla·2018-03-07·CVSS 8.8
CVE-2018-1098 [HIGH] CVE-2018-1098 CVE-2018-1099 etcd: various flaws [fedora-all]
CVE-2018-1098 CVE-2018-1099 etcd: various flaws [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. While
Bugzilla
CVE-2018-1099 etcd: DNS rebinding vulnerability in etcd server
bugzilla·2018-03-07·CVSS 5.5
CVE-2018-1099 [MEDIUM] CVE-2018-1099 etcd: DNS rebinding vulnerability in etcd server
CVE-2018-1099 etcd: DNS rebinding vulnerability in etcd server
etcd 3.3.1 and earlier does not correctly restrict access to resources based on
the hostname, thus allowing a DNS rebinding attack. An attacker can control his
DNS records and trick the browser into sending requests to an etcd server on an
internal network and bypassing the same-origin policy.
Upstream issue:
https://github.com/coreos/etcd/issues/9353
Discussion:
Created etcd tracking bugs for this issue:
Affects: fedora-all [bug 1552720]
---
Patch:
https://github.com/coreos/etcd/commit/a7e5790c82039945639798ae9a3289fe787f5e56
---
Reference:
https://www.twistlock.com/2018/02/28/dear-developers-beware-dns-rebinding/
---
Mitigation:
Configure and enable authentication on the etcd server or secure your client connectio
https://bugzilla.redhat.com/show_bug.cgi?id=1552717https://github.com/coreos/etcd/issues/9353https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JX7QTIT465BQGRGNCE74RATRQLKT2QE4/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPGYHMSKDPW5GAMI7BEP3XQRVRLLBJKS/https://bugzilla.redhat.com/show_bug.cgi?id=1552717https://github.com/coreos/etcd/issues/9353https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JX7QTIT465BQGRGNCE74RATRQLKT2QE4/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UPGYHMSKDPW5GAMI7BEP3XQRVRLLBJKS/
2018-04-03
Published