CVE-2018-10920

Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.

• CWE-20
• CWE-20

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10920Issue Tracking, Third Party Advisory
• https://www.knot-resolver.cz/2018-08-02-knot-resolver-2.4.1.htmlVendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10920Issue Tracking, Third Party Advisory
• https://www.knot-resolver.cz/2018-08-02-knot-resolver-2.4.1.htmlVendor Advisory

Published

Aug 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10915A vulnerability was found in libpq, the default PostgreSQL c…8.5
• CVE-2018-10916It has been discovered that lftp up to and including version…5.3
• CVE-2018-10917pulp 2.16.x and possibly older is vulnerable to an improper …6.8
• CVE-2018-10918A null pointer dereference flaw was found in the way samba c…5.2
• CVE-2018-10919The Samba Active Directory LDAP server was vulnerable to an …4.3
• CVE-2018-1092The ext4_iget function in fs/ext4/inode.c in the Linux kerne…
• CVE-2018-10921Certain input files may trigger an integer overflow in ttemb…4.3
• CVE-2018-10922An input validation flaw exists in ttembed. With a crafted i…7.5
• CVE-2018-10923It was found that the "mknod" call derived from mknod(2) can…8.1
• CVE-2018-10924It was discovered that fsync(2) system call in glusterfs cli…5.3
• CVE-2018-10925It was discovered that PostgreSQL versions before 10.5, 9.6.…8.1
• CVE-2018-10926A flaw was found in RPC request using gfs3_mknod_req support…8.8