CVE-2008-1184

MEDIO 5.0CVE-2008-1184 · Published 06/03/2008 · updated 16/06/2026

In breve

CVE-2008-1184 è una vulnerabilità MEDIO (CVSS 5.0) che riguarda dnssec-tools (dnssec-tools).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 70.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
dnssec-tools dnssec-tools	`≤ 1.3.1`	No fix yet

Description

The DNSSEC validation library (libval) library in dnssec-tools before 1.3.1 does not properly check that the signing key is the APEX trust anchor, which might allow attackers to conduct unspecified attacks.

References

secunia.com/advisories/29095 · Vendor Advisory
secunia.com/advisories/29127 · Patch
sourceforge.net/mailarchive/forum.php
securityfocus.com/bid/27998
vupen.com/english/advisories/2008/0673/references
exchange.xforce.ibmcloud.com/vulnerabilities/40836
redhat.com/archives/fedora-package-announce/2008-February/msg00820.html
redhat.com/archives/fedora-package-announce/2008-February/msg00845.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free